changing filter on running capture

[Stephan Knabe <sknabe () ifh de>]

Hello,
I am new to libpcap and would like to get some comments about the
following, I planned to do:

start a thread which starts a capture, initializing the device, compiling,
setting and freeing a filter and starting pcap_loop.

> From another thread, I want to change the filter, replacing the one used
by the capture.
For this I want to simply do a compiling and setting of the new filter. It
would not matter, if the next captured packet is lost ( there are enough
of them ;-), but after that one I want the capture using the new filter.

Is it possible to do it in  that way or do I have to reinitialize the
complete capturing?


regards

Stephan Knabe



-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe