On Tuesday 22 March 2005 10:28, Tom Brown wrote:
Hi,
I am using pcap_next_ex() in my application in a loop to capture all
packets on an ethernet device. I have compared the amount of packets that
my application captures to what ethereal captures and my calls to
pcap_next_ex() are just not
On Thursday 24 March 2005 08:54, Tom Brown wrote:
Ethereal and WinDump both capture all the packets coming in on the network
device. I looked through their source code and found ethereal uses
pcap_dispatch() and WinDump uses pcap_loop(). I tried using both functions
in my application. In both
On Mar 24, 2005, at 3:18 PM, Tom Brown wrote:
Thanks for your feedback. It made me inspect my application a
little closer. I
think I found the source of my problem. I was checking caplen for a
minimum
value. If it was less than a certain value I would ignore the
packet. When I
logged the
I am trying to develop a
compact, customized-to-my-purposes packet sniffer using VC++ v6.0. It was recommended to me that instead of writing a
program using hardware interfacing and working directly with
interrupts, to take a look at and use the WinPCap library. Normally I can hack my way
