Nevermind.  User error :).  Packet filtering is working.

------------------------------

Message: 2
Date: Mon, 26 Feb 2007 10:50:43 -0800
From: "Rob Willis" <[EMAIL PROTECTED]>
Subject: [Ntop-misc] packet filters not working with PF_RING
To: <[email protected]>
Message-ID:
        <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"

Is anyone else having issues with using Berkley packet filters with PF_RING?  
Even with a simple packet filter like:

host 10.10.10.2

I'm still receiving a copy of every packet from the wire.

I'm using libpfring (via libpcap) in a custom app on Fedora Core4 running on 2x 
DualCore AMD CPUs.

The problem seems specific to libpfring since if I link to a non-ring enabled 
version of libpcap, the filter works fine.

The only only non-standard thing that I may be doing is I made a call to 
pcap_setnonblock() to make reads from the NIC non-blocking.

Anyone else had issues with the packet filtering not working???




<<winmail.dat>>

_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to