[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Linux Socket Filter
- To: "Nadav Har'El" <nyh(at-nospam)math.technion.ac.il>
- Subject: Re: Linux Socket Filter
- From: guy keren <choo(at-nospam)actcom.co.il>
- Date: Thu, 21 Dec 2000 01:27:12 +0200 (EET)
- cc: <linux-il(at-nospam)linux.org.il>
- Delivered-To: linux.org.il-linux-il@linux.org.il
- In-Reply-To: <20001220124613.A26094@leeor.math.technion.ac.il>
- Sender: linux-il-bounce(at-nospam)cs.huji.ac.il
On Wed, 20 Dec 2000, Nadav Har'El wrote:
> I'm trying to program something (on Linux, of course) that will need to
> capture arbitrary packets coming to the machine (TCP segments, for example).
> One obvious solution is to use libpcap [1]. However, it apears that libpcap
> (even the latest version) uses a very inefficient method to capture packets
> that match some criterion (defined using a BPF program [2, 4]) - it moves
> all packets to user space, and does the matching there.
question - what types of packets exactly do you need to capture? is
this using a complex filter, or a simple one?
also, you want the original packets to keep on traveling to their
destinatin, or be captured by your software only, and not rich their
original destination directly?
--
guy
"For world domination - press 1,
or dial 0, and please hold, for the creator." -- nob o. dy
=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il