Dear, By specifying "cnt" a negative value in the following, we can forever capture packets.
int pcap_loop(pcap_t *p, int cnt, pcap_handler callback, u_char *user) But if i want to capture packets for half an hour for example, do we have any such configuration? Moreover, when pcakets are captured the above-mentioned api calls "pcap_handler callback" the call back, now if this function takes too much of time, may be pcap can drop packets..is it true? if yes how can we ensure that pcap doesnt drop any of the packets? Regards, kj - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
