[tcpdump-workers] Multiple interface capture and thread safety status in libpcap

Hi all, I need to perform packet sniffing on several interfaces at the same time. My natural approach would be to open a pcap_t object for each interface and place a "select" - considering Linux -call to deal with packet dispatching. My only constraint is that I have to treat the received pac

Re: [tcpdump-workers] Multiple interface capture and thread safety

-[ Thu, May 10, 2012 at 04:43:50PM +0200, Wiener Schnitzel ] > I need to perform packet sniffing on several interfaces at the same > time. > My natural approach would be to open a pcap_t object for each > interface and place a "select" - considering Linux -call to deal > with packet dispatching

Re: [tcpdump-workers] Multiple interface capture and thread safety

On 10.05.2012 16:59, ri...@happyleptic.org wrote: -[ Thu, May 10, 2012 at 04:43:50PM +0200, Wiener Schnitzel ] I need to perform packet sniffing on several interfaces at the same time. My natural approach would be to open a pcap_t object for each interface and place a "select" - considering

Re: [tcpdump-workers] Multiple interface capture and thread safety

> As I have to deal with asymm. paths and perform flow analysis, I must > ensure that the packets of a flow are analyzed in temporal order, no > matter from which interface they came through. You'll probably only manage that if the underlying low level device driver (or preferably the hardware