> Sent: Friday, January 02, 2015 at 10:56 PM > From: "Christos Zoulas" <[email protected]> > To: [email protected] > Subject: Re: Setting a rule for NPF [...] > No, there is currently no way. You would need a helper userland > process to read the data out from the device [...] > To do this, the obvious way would be to turn tcpdump into a library, > or change the main tcpdump program to do handle this. Both are > non-trivial tasks. If I feel bored someday :-)
:-) thank you for your detailed explanation! Rocky
