tcpdump mailing list archives
to recognize incoming and outgoing packets with pcap library
From: Juan Pedro Muñoz Gea <juanp.gea () upct es>
Date: Thu, 23 Nov 2006 13:16:07 +0100
Hi all, I'm using pcap library to capture live packets. I want to distinguish incoming and outgoing captured packets in an interface in promiscuous mode, without examining the payload, but I don't know the way to do it. Using the PF_PACKET sockets family, if we use the "recvfrom" function and a "struct sockaddr_ll" in the "from" field, we can use the "struct sockaddr_ll.sll_pkttype" to know if the captured packet is a PACKET_OUTGOING. But I don't know if the there is something similar in the pcap library. Also, I would like knowing if I might to apply a "FILTER" for all the incoming packets, and so, I would only receive the incoming packets. Any help will be appreciated Thanks in advance - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- to recognize incoming and outgoing packets with pcap library Juan Pedro Muñoz Gea (Nov 23)
- Re: to recognize incoming and outgoing packets Hannes Gredler (Nov 23)