>>>>> "callaguy" == =?EUC-KR?B?waS/tcO2?= <EUC-KR> writes:
callaguy> Hello? My name is Young-chul,jung who is attending Yeungnam
callaguy> University in South of Korea.
callaguy> Now a days, I'm making a simple packet capture application. So
callaguy> I use wpacp library
callaguy> but I have a question for one function,define "pcap" header file
callaguy> when we use "pcap_t *pcap_open_live(char *device, int snaplen,
callaguy> int promisc, int to_ms, char *ebuf)", what is the "snaplen"?
callaguy> In manual, It written "snaplen specifies the maximum number of
callaguy> bytes to capture. "
Precisely what the manual says.
It is the number of bytes of the packet to capture.
If you are just interested in TCP/IP headers, you might specify 64 or so,
which reduces the number of bytes that you have to process. If you want
everything, then you need to set it to the maximum transmission size of your
media (1500 for 10/100, 9K for GbE, 4K for FDDI, etc..)
] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
