<br><span class="Apple-style-span" style="border-collapse: collapse; font-family: arial, sans-serif; font-size: 13px; ">> I wanted to clarify what this func pcap_next_ex( ) and pcap_open_live( )actually does.<br>> The reason why i am asking is, when i use these functions, i see some packets generated.<br>
<br>>>Well, yes, if you call pcap_open_live() to open a network device for capturing, and then call pcap_next_ex() to read a packet from the >>device, you might see packets - that's the whole point of libpcap/WinPcap!<br>
<br></span><span class="Apple-style-span" style="border-collapse: collapse; font-family: arial, sans-serif; font-size: 13px; ">>>Those packets might be sent by your machine, or might be received by your machine.</span><div>
<font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;">Yes, i understandits whole point of winpcap/libpcap.<br>
</span></font></div><div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;">But , where and how exactly is packet generated? because, i never explicitly generated this packet.</span></font></div>
<div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;">Also, could you let me know, what exactly pcap_open_live( ) and pcap_next_ex( ) functions do, apart from opening device and read a packet.</span></font></div>
<div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;">your suggestions will be much appreciated.</span></font></div>
<div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br>
</span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div><div><font class="Apple-style-span" face="arial, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br>
</span></font><div class="gmail_quote">On Tue, Jul 19, 2011 at 12:30 AM, <span dir="ltr"><<a href="mailto:winpcap-users-request@winpcap.org">winpcap-users-request@winpcap.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Send Winpcap-users mailing list submissions to<br>
<a href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:winpcap-users-request@winpcap.org">winpcap-users-request@winpcap.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:winpcap-users-owner@winpcap.org">winpcap-users-owner@winpcap.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Winpcap-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: pcapt_open_live ( ) function, how it works? (Guy Harris)<br>
2. pcap_open or pcap_next or pcap_next_ex (Emre Eri?gen)<br>
3. WinPCAP Tx pkts not counted in GetIfTable() stats? (Srivats P)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 17 Jul 2011 12:08:30 -0700<br>
From: Guy Harris <<a href="mailto:guy@alum.mit.edu">guy@alum.mit.edu</a>><br>
To: <a href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</a><br>
Subject: Re: [Winpcap-users] pcapt_open_live ( ) function, how it<br>
works?<br>
Message-ID: <<a href="mailto:5C2FBD51-0D89-407A-9E53-1F252AC436EC@alum.mit.edu">5C2FBD51-0D89-407A-9E53-1F252AC436EC@alum.mit.edu</a>><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
<br>
On Jul 17, 2011, at 8:02 AM, rajath kumara wrote:<br>
<br>
> I wanted to clarify what this func pcap_next_ex( ) and pcap_open_live( )actually does.<br>
> The reason why i am asking is, when i use these functions, i see some packets generated.<br>
<br>
Well, yes, if you call pcap_open_live() to open a network device for capturing, and then call pcap_next_ex() to read a packet from the device, you might see packets - that's the whole point of libpcap/WinPcap!<br>
<br>
Those packets might be sent by your machine, or might be received by your machine.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Mon, 18 Jul 2011 10:48:32 +0300<br>
From: Emre Eri?gen <<a href="mailto:emreerisgen@gmail.com">emreerisgen@gmail.com</a>><br>
To: <a href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><br>
Subject: [Winpcap-users] pcap_open or pcap_next or pcap_next_ex<br>
Message-ID:<br>
<CAF8arNgUXvHeCj=huCq375LwufTf=<a href="mailto:vQnZcwb00VEO5Q7K1bNGA@mail.gmail.com">vQnZcwb00VEO5Q7K1bNGA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Which of them should i use if i want to listen an interface with 2 different<br>
filters at the same time? Do these methods block the packet so the other one<br>
couldnt get the packet? Or do they share the packet?<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://www.winpcap.org/pipermail/winpcap-users/attachments/20110718/f4fc0383/attachment-0001.html" target="_blank">http://www.winpcap.org/pipermail/winpcap-users/attachments/20110718/f4fc0383/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Mon, 18 Jul 2011 21:38:23 +0530<br>
From: Srivats P <<a href="mailto:pstavirs@gmail.com">pstavirs@gmail.com</a>><br>
To: <a href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><br>
Subject: [Winpcap-users] WinPCAP Tx pkts not counted in GetIfTable()<br>
stats?<br>
Message-ID:<br>
<CADuAJ1HhMdaQEwL=HSqtfa9+2EptamGtD04Cp2C24=<a href="mailto:848_mJbA@mail.gmail.com">848_mJbA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
Hi,<br>
<br>
On Windows XP, I'm retreiving interface stats using the IP Helper API<br>
- GetIfTable(). However, it looks like packets transmitted using<br>
WinPCAP APIs - pcap_sendpacket()/pcap_sendqueue_transmit() are not<br>
being counted. Is this expected? I'm using WinPcap 4.1.2.<br>
<br>
Isn't the stats returned by GetIfTable() equivalent to the IfMIB<br>
stats? If not, would anyone know which Win32 API would return the<br>
same?<br>
<br>
Regards,<br>
Srivats<br>
(<a href="http://ostinato.org" target="_blank">http://ostinato.org</a>)<br>
<br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
<br>
<br>
End of Winpcap-users Digest, Vol 76, Issue 12<br>
*********************************************<br>
</blockquote></div><br></div></div>