[PATCH]: pcap and zero copy with requested modification

[Yoann Vandoorselaere <yoann () prelude-ids org>]

Hi,

Here is an updated patch following the discussion that occured on
tcpdump-workers.

I figured out a way for backend to be ported much more easily, and now
porting the backend to the new API is really straight forward. 

I ported most, if not all the backend (excepted pcap-enet.c which look
like unsupported), thought I'm a little tired and it is possible that I
forgot some :)

Also, I only could test my change on OpenBSD 3.2 and Linux 2.6.0, so any
report about compilation failure, or any application going down in flame
will be welcome...

The patch fix the following issue:

- remove constness fix from the patch
- remove use of zero sized array (some architecture doesn't support it).
- port to libpcap-0.8.1.
- port to yet unsuported backend.
- make it way more easy for a backend to support the new scheme.
- move pcap_next() modification to pcap_next_ex()


Regards,


-- 
Yoann Vandoorselaere <yoann () prelude-ids org>

Attachment: libpcap.diff
Description:

Attachment: signature.asc
Description: This is a digitally signed message part