[Winpcap-users] pcapt_open_live ( ) function, how it works?

Guy Harris guy at alum.mit.edu
Sun Jul 17 12:08:30 PDT 2011

On Jul 17, 2011, at 8:02 AM, rajath kumara wrote:

>  I wanted to clarify what this func pcap_next_ex( ) and pcap_open_live( )actually does.
> The reason why i am asking is, when i use these  functions, i see some packets generated.

Well, yes, if you call pcap_open_live() to open a network device for capturing, and then call pcap_next_ex() to read a packet from the device, you might see packets - that's the whole point of libpcap/WinPcap!

Those packets might be sent by your machine, or might be received by your machine.

More information about the Winpcap-users mailing list