From owner-freebsd-hackers  Wed Aug 13 06:18:11 1997
Return-Path: <owner-freebsd-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id GAA16838
          for hackers-outgoing; Wed, 13 Aug 1997 06:18:11 -0700 (PDT)
Received: from plains.NoDak.edu (tinguely@plains.NoDak.edu [134.129.111.64])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id GAA16821
          for <freebsd-hackers@FreeBSD.ORG>; Wed, 13 Aug 1997 06:17:52 -0700 (PDT)
Received: (from tinguely@localhost)
	by plains.NoDak.edu (8.8.5/8.8.5) id IAA15932;
	Wed, 13 Aug 1997 08:17:32 -0500 (CDT)
Date: Wed, 13 Aug 1997 08:17:32 -0500 (CDT)
From: Mark Tinguely <tinguely@plains.NoDak.edu>
Message-Id: <199708131317.IAA15932@plains.NoDak.edu>
To: adrian@obiwan.psinet.net.au, freebsd-hackers@FreeBSD.ORG
Subject: Re: Information on using the BPF?
Sender: owner-freebsd-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

>  I'm going to be using the bpf for an upcoming project, and save reading
>  tcpdump source, is there a good source of information on how to program
>  it? (I'd rather talk directly to it rather than via a library or some
>  other front end, this thing needs to run rather quickly ;)

the manual pages for bpf(4) and pcap(3) should give you enough to
start.

--mark.