Title: How to use TotDrops in pcap_md

I am new to the mailing list and don't know if it is fittng for me to propose a question here:

I checked quite a few items in Ethereal mailing list, but have not found how to know if any packets dropped (or how many packets dropped) in ETHEREAL or its offline (sniffed) files.

I do not remember where the following definitions come from.  Could anybody instruct me how to use the following information to get "TotDrops" (for example, in C/C++)?

//struct pcap_md {
//      struct pcap_stat stat;
/*XXX*/
//      int use_bpf;            /* using kernel filter */
//      u_long  TotPkts;        /* can't oflow for 79 hrs on ether */
//      u_long  TotAccepted;    /* count accepted by filter */
//      u_long  TotDrops;       /* count of dropped packets */
//      long    TotMissed;      /* missed by i/f during this run */
//      long    OrigMissed;     /* missed by i/f before this run */
//#ifdef linux
//      int     sock_packet;    /* using Linux 2.0 compatible interface */
//      int     readlen;        /* byte count to hand to "recvmsg()" */
//      int     timeout;        /* timeout specified to pcap_open_live */
//      int     clear_promisc;  /* must clear promiscuous mode when we close */
//      int     cooked;         /* using SOCK_DGRAM rather than SOCK_RAW */
//      int     lo_ifindex;     /* interface index of the loopback device */
//      char    *device;        /* device name */
//      struct pcap *next;      /* list of open promiscuous sock_packet pcaps */
//#endif
//};

_______________________________________________
Ethereal-users mailing list
[EMAIL PROTECTED]
http://www.ethereal.com/mailman/listinfo/ethereal-users

Reply via email to