Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Aug 1997 15:38:42 -0400 (EDT)
From:      Brian Mitchell <brian@firehouse.net>
To:        Adrian Chadd <adrian@obiwan.psinet.net.au>
Cc:        freebsd-hackers@FreeBSD.ORG
Subject:   Re: Information on using the BPF?
Message-ID:  <Pine.BSI.3.95.970813153736.4229C-100000@shell.firehouse.net>
In-Reply-To: <Pine.BSF.3.95q.970813194620.6987A-100000@obiwan.psinet.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 13 Aug 1997, Adrian Chadd wrote:

> Hi.
> 
> I'm going to be using the bpf for an upcoming project, and save reading
> tcpdump source, is there a good source of information on how to program
> it? (I'd rather talk directly to it rather than via a library or some
> other front end, this thing needs to run rather quickly ;)

the bpf man page is really really really detailed, and an excellent source
of information. I don't imagine you will need anything more.

btw, tcpdump source wont help you at all, it uses libpcap :). libpcap
source, on the other hand, may be of considerable use. For what it's
worth, i'd probably use libpcap instead.

> 
> Thanks,
> 
> -- 
> Adrian Chadd			| "Unix doesn't stop you from doing
> <adrian@psinet.net.au>		|   stupid things because that would 
> 				|    stop you from doing clever things"
> 
> 
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.970813153736.4229C-100000>