HTTPS clone URL
Subversion checkout URL
the LIBpcap interface to various kernel packet capture mechanism
add_with-libnl_switch android-libpcap-0.9.8 bare coverity_scan lbl libpcap-1.6 libpcap_0_6 libpcap_0_7 libpcap_0_8rel1 libpcap_0_8 libpcap_0_9 libpcap_1_0_rel0b libpcap_1_0 libpcap_1.1 libpcap_1.2 libpcap_1.3 libpcap_1_4rel0 libpcap_1.4 libpcap_1.5 libpcap_1_5 linux-2-2-packet master origin tcpdump_3_5
Nothing to show
Nothing to show
Fetching latest commit...
Cannot retrieve the latest commit at this time.
@(#) $Header: /tcpdump/master/libpcap/README,v 188.8.131.52 1999-10-07 23:46:40 mcr Exp $ (LBL) LIBPCAP 0.4 Lawrence Berkeley National Laboratory Network Research Group firstname.lastname@example.org ftp://ftp.ee.lbl.gov/libpcap.tar.Z This directory contains source code for libpcap, a system-independent interface for user-level packet capture. libpcap provides a portable framework for low-level network monitoring. Applications include network statistics collection, security monitoring, network debugging, etc. Since almost every system vendor provides a different interface for packet capture, and since we've developed several tools that require this functionality, we've created this system-independent API to ease in porting and to alleviate the need for several system-dependent packet capture modules in each application. Note well: this interface is new and is likely to change. The libpcap interface supports a filtering mechanism based on the architecture in the BSD packet filter. BPF is described in the 1993 Winter Usenix paper ``The BSD Packet Filter: A New Architecture for User-level Packet Capture''. A compressed postscript version is in: ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z. Although most packet capture interfaces support in-kernel filtering, libpcap utilizes in-kernel filtering only for the BPF interface. On systems that don't have BPF, all packets are read into user-space and the BPF filters are evaluated in the libpcap library, incurring added overhead (especially, for selective filters). Ideally, libpcap would translate BPF filters into a filter program that is compatible with the underlying kernel subsystem, but this is not yet implemented. BPF is standard in 4.4BSD, BSD/386, NetBSD, and FreeBSD. DEC OSF/1 uses the packetfilter interface but has been extended to accept BPF filters (which libpcap utilizes). Also, you can add BPF filter support to Ultrix using the kernel source and/or object patches available in: ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z. Problems, bugs, questions, desirable enhancements, source code contributions, etc., should be sent to the email address "email@example.com". - Steve McCanne Craig Leres Van Jacobson