Hi,
I'm not sure if this is the right place to ask this question. Please direct me
to a more suitable forum if otherwise.
I would like to be able to directly access the buffer where packets are stored
when they're received. After some googling, I think perhaps libpcap with mmap
would be the solution. Does libpcap 1.0 and above support mmap?
>From my understanding, mmap would allow me to directly access the buffer
>without having to explicitly copy the packet to another buffer for me to do
>processing. I would also appreciate it if someone can let me know where I can
>find examples of such applications, as many examples of mmap I've found
>involves mapping a buffer for file operations, rather than integrating it with
>pcap functions like pcap_loop, pcap_next_ex etc.
Thank you.
Regards,
Rayne
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
