From owner-freebsd-hackers Wed Sep 12 0:39:32 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from ns.morning.ru (ns.morning.ru [195.161.98.5]) by hub.freebsd.org (Postfix) with ESMTP id 7F3B137B407 for ; Wed, 12 Sep 2001 00:39:27 -0700 (PDT) Received: from NDNM ([195.161.98.250]) by ns.morning.ru (8.11.5/8.11.5) with ESMTP id f8C7cpd55946; Wed, 12 Sep 2001 15:39:23 +0800 (KRAST) Date: Wed, 12 Sep 2001 15:39:12 +0800 From: Igor Podlesny X-Mailer: The Bat! (v1.53d) UNREG / CD5BF9353B3B7091 Organization: Morning Network X-Priority: 3 (Normal) Message-ID: <17069356238.20010912153912@morning.ru> To: Jean-Francois Dive Cc: hackers@FreeBSD.ORG Subject: Re[2]: libcap question In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > Hi, > From what i know, it is not. Bpf does copy the frame to make it accessible > to the pcap code and does loose this information. I however guess it is > possible to compute it from the local host information... alas, not always and not easy... > JeF > On Wed, 12 Sep 2001, Igor Podlesny wrote: >> >> Hello! >> >> I suspect that it's impossible to check out with libcap (BPF) whether >> a captured packet is incoming or outgoing, but may be it is not? >> >> -- >> Best regards, >> Igor mailto:poige@morning.ru >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-hackers" in the body of the message >> -- Igor mailto:poige@morning.ru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message