struct pcap_pkthdr {
struct timeval ts; /* time stamp */
bpf_u_int32 caplen; /* length of portion present */
bpf_u_int32 len; /* length this packet (off wire) */
};As i know,the caplen is length of packet that captured from network card. the len is length of packet that filtered by libpcap. Is that right?please tell me the answer.thanks a lot -- You know you are the best.
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
