From owner-freebsd-questions@FreeBSD.ORG Sun Feb 4 19:48:16 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7129616A402 for ; Sun, 4 Feb 2007 19:48:16 +0000 (UTC) (envelope-from nocturnal@swehack.se) Received: from smtp1.inkorgen.com (smtp1.inkorgen.com [82.99.44.201]) by mx1.freebsd.org (Postfix) with ESMTP id 021C913C461 for ; Sun, 4 Feb 2007 19:48:15 +0000 (UTC) (envelope-from nocturnal@swehack.se) Received: from proxy1.inkorgen.com (proxy1 [192.168.100.1]) by smtp1.inkorgen.com (8.13.8/8.13.8) with ESMTP id l14JGBSe065439 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 4 Feb 2007 20:16:11 +0100 (CET) Received: from [85.24.149.192] (h-149-192.A175.cust.bahnhof.se [85.24.149.192]) (authenticated bits=0) by proxy1.inkorgen.com (8.13.8/8.13.8) with ESMTP id l14JBOVj096568 for ; Sun, 4 Feb 2007 20:11:25 +0100 (CET) Message-ID: <45C630FD.3080801@swehack.se> Date: Sun, 04 Feb 2007 20:16:13 +0100 From: nocturnal User-Agent: Thunderbird 1.5 (X11/20060317) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Scanned: ClamAV version 0.88.5, clamav-milter version 0.88.5 on washer1.inkorgen.com X-Virus-Status: Clean Subject: packet destination from pcap X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Feb 2007 19:48:16 -0000 Hi I'm sniffing packets with pcap but i need information about where the packet is going. So far i haven't found any structure or any other way to get this information from looking at the pcap(3) manual and the pcap.h header file. I have not had a chance to go through the source for pcap yet because i have been offline for a while with no source on my laptop. I'm thinking i need to open two pcap sessions with two different filters because the application i'm writing has a need for distinguishing between packets going to a specified ip-address and those going from it. I doubt it should have to come to that though so that's why i ask here first. I could not reach the tcpdump list so i thought i'd ask here since it uses the bpf. Might be a long shot. -- Med vänliga hälsningar Stefan Midjich aka nocturnal [Swehack] http://swehack.se