-Original Message-
From: tcpdump-workers-ow...@lists.tcpdump.org
[mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of Guy Harris
Sent: Sunday, February 05, 2012 12:23 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] question regarding bpf_program
On Feb
On Feb 4, 2012, at 8:18 PM, Prashant Batra (prbatra) wrote:
> [Prashant] Thanks, but I used the same device to check this.
Then you must have disabled the optimizer, or used different versions of
libpcap, or something.
What was the exact tcpdump command you used with "-d" - just "tcpdump -d",
-Original Message-
From: tcpdump-workers-ow...@lists.tcpdump.org
[mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of Guy Harris
Sent: Sunday, February 05, 2012 2:32 AM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] question regarding bpf_program
On Feb 4
On Feb 4, 2012, at 12:02 PM, Prashant Batra (prbatra) wrote:
> I want to use "pcap_compile" to get a bpf filter from a string. And then
> I want to use the filter in the form of sock_filter to set as a socket
> option to capture the packets specified by the filter. I want to receive
> the filter
Hi All,
I want to use "pcap_compile" to get a bpf filter from a string. And then
I want to use the filter in the form of sock_filter
to set as a socket option to capture the packets specified by the
filter. I want to receive the filtered packets using PF_PACKET family
socket.
But what I h
