Re: [tcpdump-workers] some questions about libpcap , especially with fork() called

2013-04-08 Thread wen lui
thanks, I have another question if I want to capture packets with ACK flag set for EACH INCOMING TCP connection so I put accept() in a loop // proxy server listen, waiting for receiver's tcp request listen(listenfd, 1024); while(1) { connfd = accept(listenfd, (stru

Re: [tcpdump-workers] some questions about libpcap , especially with fork() called

2013-04-07 Thread Guy Harris
On Apr 7, 2013, at 3:25 PM, wen lui wrote: > 1 I don't know how pcap handler works, my understanding is: when > pcap_open_live() function is called and the filter is set, it will capture > all matching packets and put them in a FIFO queue somewhere. Then, each > time I call pcap_next(), the pack