Re: libpcap : Reading from kernel interface

[Rick Jones <rick.jones2 () hp com>]

madhurag () iitk ac in wrote:
> Hello friends,
>
> I wish to use hostap (a driver for wireless cards) + libpcap + tcpdump to
> bring some extra details of the packets in the user space.
>
> I wish to know that how libpcap reads the packet from the kernel/interfaces.

That varies by platform.  Probably best done as a "Use the Source, Luke" 
(Star Wars "Use the Force" take-off) kind of thing.  On HP-UX/Solaris 
libpcap uses dlpi, on others a /dev/bpf etc etc.

They are all _pretty_ much variations on the read/write/ioctl theme.

> For my purpose, i have to implement an interface in the hostap code (which
> i shall be registering with the kernel). Then how shall i modify the
> libpcap code to read from this interface too.

Mimic what the closest "pcap_mumble.c" file does.

> Also i dont need libpcap to filter any packets collected from this new
> interface as they have already been filtered in the driver code itself.
>
> A quick help will be much appreciated.
> Thanks a lot in advance
>
> -madhuresh
>
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.