Re: packet drops and zero copy filtering?

[Guy Harris <gharris () sonic net>]

On Sun, Jul 13, 2003 at 10:17:29PM -0700, Richard Sharpe wrote:
> I don't think that with packet filtering you really have a socket, 
> although I could be wrong on that score.

It depends on the OS on which you're running.

On the BSDs (including Darwin/Mac OS X), and on AIX if you're using BPF,
you have a BPF device.

On systems using DLPI (Solaris, HP-UX, AIX if you're using DLPI,
possibly others), you have a STREAMS descriptor for a networking device.

On Digital/Tru64 UNIX, you have a packetfilter(7) device.

On Linux and Irix, you have a socket.

On Win32 with WinPcap, you have an NPF device.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe