Recent versions of libpcap have a pcap_breakloop() function that does what you
are specifically asking for (called inside a packet loop handler, it causes an
immediate return from the loop with a -2 error code), although I suspect that
using the "any" interface, or pcap_next_ex(), might be bette
ginal Message -
From: "Richard H." <[EMAIL PROTECTED]>
To: "tcpdump workers"
Sent: Wednesday, August 16, 2006 11:15 AM
Subject: [tcpdump-workers] pcap: forcing pcap_loop() failures
Level: pcaplib novice
OS: Linux 2.6.20
I've been running a pcaplib app that read
Why not use the 'any' device on Linux? I'm not sure if it will be
supported in 2.6.20, but
in recent kernels it is :-)
Best regards
Michael
On Aug 16, 2006, at 8:15 PM, Richard H. wrote:
Level: pcaplib novice
OS: Linux 2.6.20
I've been running a pcaplib app that reads continually from a
Level: pcaplib novice
OS: Linux 2.6.20
I've been running a pcaplib app that reads continually from a network switch
port and processes a well-defined application protocol. Let's say the
network interface it reads from is 'eth0'.
I need to augment this app to handle the failover to a differ