On Thu, 21 Dec 2000, Nadav Har'El wrote:
> > also, you wantthe original packets to keep on traveling to their
> > destinatin, or be captured by your software only, and not rich their
> > original destination directly?
>
> I want only my program to get these packets (otherwise the kernel will rui
On Thu, Dec 21, 2000, guy keren wrote about "Re: Linux Socket Filter":
>
> On Wed, 20 Dec 2000, Nadav Har'El wrote:
>
> question - what types of packets exactly do you need to capture? is
> this using a complex filter, or a simple one?
I'm trying to do some
On Wed, 20 Dec 2000, Nadav Har'El wrote:
> I'm trying to program something (on Linux, of course) that will need to
> capture arbitrary packets coming to the machine (TCP segments, for example).
> One obvious solution is to use libpcap [1]. However, it apears that libpcap
> (even the latest versi
Nadav Har'El wrote:
>
> However, it appears that Linux provides an in-kernel BFP-like feature called
> "Linux Socket Filter" [3], that is included in modern kernels (e.g., it
> is included in Redhat 7, but probably in earlier distributions too), which
> s
pture packets
that match some criterion (defined using a BPF program [2, 4]) - it moves
all packets to user space, and does the matching there.
However, it appears that Linux provides an in-kernel BFP-like feature called
"Linux Socket Filter" [3], that is included in modern kernels (e.g., it
