Hi,
> I would like to capture TCP traffic to/from several groups of hosts, maybe we
> are talking about 20-30 groups in the maximum with something between 1-10
> hosts in each group. All these host have individual IPs and ports, there is no
> chance to capture parts of a network or something like
/*
* Get a handle for a live capture from the given device. You can
* pass NULL as device to get all packages (without link level
* information of course). If you pass 1 as promisc the interface
* will be set to promiscous mode (XXX: I think this usage should
* be deprecated and function
