On Friday, July 11, 2003, at 6:38 PM, Guy Harris wrote:
If you want to use it to compile a filter expression into BPF code without using "pcap_open_live()" to get your capture handle, you could use "pcap_open_dead()",
Yes, I know, the documentation for it in the WinPcap 3.0 manual says "Deprecated: use the pcap_open() instead", but there doesn't seem to be any way to use "pcap_open()" to get a pcap_t that doesn't refer to a device or a savefile.
Note, BTW, that the packet.dll documentation for WinPcap 3.0 says
Important note, read carefully!
If you are writing a capture application and you do not have particular/low level requrements, you are recommended to use the functions of wpcap (see the section� WinPcap user's manual ), that are compatible with the ones of the Unix packet capture library (libpcap), instead of the API described in this chapter. wpcap.dll relies on packet.dll, but provides a more powerful, immediate and easy to use programming environment. With wpcap.dll, operations like capturing a packet, creating a capture filter or saving a dump on a file are safely implemented and intuitive to use.� Moreover, the programs written to use libpcap are easily compiled on Unix thanks to the compatibility between Win32 and Unix versions of this library.
As a consequence, since the normal and suggested way for an application to use WinPcap is through wpcap.dll, we don't grant that the packet.dll API will not be changed in the future releases.
so you use packet.dll functions at your own risk.
================================================================= This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/
To unsubscribe use mailto: [EMAIL PROTECTED] =================================================================
