On Tue, May 21, 2002 at 03:42:50PM +0200, Andrea Montefusco wrote: > Is it possible, with the current pcap API, to block > filtered packets ?
What do you mean by "block"? > I need to process UDP packets received via libpcap > without other IP stack processing (that generate > ICMP port unreacheable). If you mean "is there a way for a libpcap-based application to use libpcap to see UDP packets sent to the machine running the libpcap-based application, even if those UDP packets cause that machine to send out an ICMP Port Unreachable", the answer is "yes" - the packets are supplied to libpcap before the IP stack sees them. However, if you mean "is there a way for libpcap-based application to see those UDP packets *AND* to use libpcap to prevent the IP stack from generating the ICMP Port Unreachable for them", the answer is "no" - the fact that those packets are passed on to the OS packet capture mechanism used by libpcap does *NOT* mean that the packets won't also be passed on to the IP stack. - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
