Re: skip pflog interfaces in pcap_lookupdev()

2014-03-17 Thread Lawrence Teo
On Thu, Aug 08, 2013 at 12:12:39AM -0500, joshua stein wrote: > Running tcpdump with no -i arg finds a good interface to listen on > by default on many machines, but on my laptop it finds pflog0 before > urtwn0. Can we skip pflog interfaces like loopbacks? I got reminded of this diff while workin

skip pflog interfaces in pcap_lookupdev()

2013-08-07 Thread joshua stein
Running tcpdump with no -i arg finds a good interface to listen on by default on many machines, but on my laptop it finds pflog0 before urtwn0. Can we skip pflog interfaces like loopbacks? I had a version that looked up the interface in the egress group but this is much simpler since pflog0 is us