manpagez: man pages & more man pcap-filter(7) man pages By Section Alphabetically Other versions ofpcap-filterHome | html | info | man pcap-filter(7) Miscellaneous Information Manual pcap-filter(7) NAME pcap-filter - packet filter syntax DESCRIPTION pcap_compile(3) is used to compile...
pcap_compile() is used to compile a string into a filter program. The resulting filter program can then be applied to some stream of packets to determine which packets will be supplied to pcap_loop(), pcap_dispatch(), pcap_next(), or pcap_next_ex(). The filter expression consists of ...
Be aware that, just becausepcap_next()returns, that doesn't necessarily mean that a packet was captured. To quotethepcap_next_ex()man page: pcap_next()returns a pointer to the packet data on success, and returnsNULLif an error occurred,or if no packets were read from a live capture (...
On {Digital,Tru64} UNIX, the "packetfilter(7)" man page (at least for Tru64 UNIX 5.1) says: EIOCFLUSH After changing the packet filter program, the input queue may contain packets that were accepted under the old filter. To flush the queue of incoming packets, use the following: ioctl...
Change exit behavior to match BSD & GNU grep (see manpage) Add Solaris IPnet support Update to use 32bit values where relevant Emit frame # in header, useful for reference/analysis Emit total received, matched upon exit (dropped unreliable PCAP stats) ...