[tcpdump-workers] pcap_next_ex calls pcap_oneshot instead of p->oneshot_callback

2011-02-04 Thread Tobias C Rittweiler
Hi there! In the latest release as well as git HEAD, pcap_next_ex calls pcap_oneshot (the default callback) instead of p->oneshot_callback like pcap_next does. This means that packets change underneath one application when using Linux and its mmapped ring buffer. Additionally, I think the manpa

[tcpdump-workers] inject & read from the same interface

2011-03-02 Thread Tobias C Rittweiler
Hi there! It seems to me that if I inject a packet P to a pcap handle H of an interface I, the next read (by pcap_next() etc.) will /not/ return P. However, if I have two handles H1 and H2 of the same interface I, and I inject P into H1, a read from H2 /will/ return that injected packet P. Is th