Date: Wed, 12 Sep 2001 15:39:12 +0800 From: Igor Podlesny <poige@morning.ru> To: Jean-Francois Dive <jef@linuxbe.org> Cc: hackers@FreeBSD.ORG Subject: Re[2]: libcap question Message-ID: <17069356238.20010912153912@morning.ru> In-Reply-To: <Pine.LNX.4.33.0109121654040.867-100000@gardafou.k-net.eu.org> References: <Pine.LNX.4.33.0109121654040.867-100000@gardafou.k-net.eu.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> Hi, > From what i know, it is not. Bpf does copy the frame to make it accessible > to the pcap code and does loose this information. I however guess it is > possible to compute it from the local host information... alas, not always and not easy... > JeF > On Wed, 12 Sep 2001, Igor Podlesny wrote: >> >> Hello! >> >> I suspect that it's impossible to check out with libcap (BPF) whether >> a captured packet is incoming or outgoing, but may be it is not? >> >> -- >> Best regards, >> Igor mailto:poige@morning.ru >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-hackers" in the body of the message >> -- Igor mailto:poige@morning.ru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17069356238.20010912153912>