pcap_open_dead(3pcap) [x11r4 man page]

PCAP_OPEN_DEAD(3PCAP)													     PCAP_OPEN_DEAD(3PCAP)

NAME

       pcap_open_dead - open a fake pcap_t for compiling filters or opening a capture for output

SYNOPSIS

       #include <pcap/pcap.h>

       pcap_t *pcap_open_dead(int linktype, int snaplen);

DESCRIPTION

       pcap_open_dead()  is  used  for	creating a pcap_t structure to use when calling the other functions in libpcap.  It is typically used when
       just using libpcap for compiling BPF code.

       linktype specifies the link-layer type for the pcap_t.

       snaplen specifies the snapshot length for the pcap_t.

SEE ALSO

       pcap(3PCAP), pcap-linktype(7)

								   5 April 2008 					     PCAP_OPEN_DEAD(3PCAP)

PCAP_FILENO(3PCAP)														PCAP_FILENO(3PCAP)

NAME

       pcap_fileno - get the file descriptor for a live capture

SYNOPSIS

       #include <pcap/pcap.h>

       int pcap_fileno(pcap_t *p);

DESCRIPTION

       If  p  refers  to  a  network  device that was opened for a live capture using a combination of pcap_create() and pcap_activate(), or using
       pcap_open_live(), pcap_fileno() returns the file descriptor from which captured packets are read.

       If p refers to a ``savefile'' that was opened using functions such as pcap_open_offline() or pcap_fopen_offline(), a ``dead'' pcap_t opened
       using  pcap_open_dead(),  or  a	pcap_t	that  was  created with pcap_create() but that has not yet been activated with pcap_activate(), it
       returns -1.

SEE ALSO

       pcap(3PCAP),  pcap_create(3PCAP),   pcap_activate(3PCAP),   pcap_open_live(3PCAP),   pcap_open_offline(3PCAP),	pcap_fopen_offline(3PCAP),
       pcap_open_dead(3PCAP)

								   5 April 2008 						PCAP_FILENO(3PCAP)