[Winpcap-users] pcapt_open_live ( ) function, how it works?

[rajath kumara]

>  I wanted to clarify what this func pcap_next_ex( ) and pcap_open_live(
)actually does.
> The reason why i am asking is, when i use these  functions, i see some
packets generated.

>>Well, yes, if you call pcap_open_live() to open a network device for
capturing, and then call pcap_next_ex() to read a packet from the >>device,
you might see packets - that's the whole point of libpcap/WinPcap!

>>Those packets might be sent by your machine, or might be received by your
machine.

Yes, i understandits whole point of winpcap/libpcap.

But , where and how exactly is packet generated? because, i never explicitly
generated this packet.

Also, could you let me know, what exactly pcap_open_live( ) and
pcap_next_ex( ) functions do, apart from opening device and read a packet.

your suggestions will be much appreciated.




On Tue, Jul 19, 2011 at 12:30 AM, <winpcap-users-request at winpcap.org> wrote:

> Send Winpcap-users mailing list submissions to
>        winpcap-users at winpcap.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://www.winpcap.org/mailman/listinfo/winpcap-users
> or, via email, send a message with subject or body 'help' to
>        winpcap-users-request at winpcap.org
>
> You can reach the person managing the list at
>        winpcap-users-owner at winpcap.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Winpcap-users digest..."
>
>
> Today's Topics:
>
>   1. Re: pcapt_open_live ( ) function, how it works? (Guy Harris)
>   2. pcap_open or pcap_next or pcap_next_ex (Emre Eri?gen)
>   3. WinPCAP Tx pkts not counted in GetIfTable() stats? (Srivats P)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sun, 17 Jul 2011 12:08:30 -0700
> From: Guy Harris <guy at alum.mit.edu>
> To: winpcap-users at winpcap.org
> Subject: Re: [Winpcap-users] pcapt_open_live ( ) function, how it
>        works?
> Message-ID: <5C2FBD51-0D89-407A-9E53-1F252AC436EC at alum.mit.edu>
> Content-Type: text/plain; charset=us-ascii
>
>
> On Jul 17, 2011, at 8:02 AM, rajath kumara wrote:
>
> >  I wanted to clarify what this func pcap_next_ex( ) and pcap_open_live(
> )actually does.
> > The reason why i am asking is, when i use these  functions, i see some
> packets generated.
>
> Well, yes, if you call pcap_open_live() to open a network device for
> capturing, and then call pcap_next_ex() to read a packet from the device,
> you might see packets - that's the whole point of libpcap/WinPcap!
>
> Those packets might be sent by your machine, or might be received by your
> machine.
>
>
> ------------------------------
>
> Message: 2
> Date: Mon, 18 Jul 2011 10:48:32 +0300
> From: Emre Eri?gen <emreerisgen at gmail.com>
> To: Winpcap-users at winpcap.org
> Subject: [Winpcap-users] pcap_open or pcap_next or pcap_next_ex
> Message-ID:
>        <CAF8arNgUXvHeCj=huCq375LwufTf=vQnZcwb00VEO5Q7K1bNGA at mail.gmail.com
> >
> Content-Type: text/plain; charset="iso-8859-1"
>
> Which of them should i use if i want to listen an interface with 2
> different
> filters at the same time? Do these methods block the packet so the other
> one
> couldnt get the packet? Or do they share the packet?
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> http://www.winpcap.org/pipermail/winpcap-users/attachments/20110718/f4fc0383/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 3
> Date: Mon, 18 Jul 2011 21:38:23 +0530
> From: Srivats P <pstavirs at gmail.com>
> To: Winpcap-users at winpcap.org
> Subject: [Winpcap-users] WinPCAP Tx pkts not counted in GetIfTable()
>        stats?
> Message-ID:
>        <CADuAJ1HhMdaQEwL=HSqtfa9+2EptamGtD04Cp2C24=848_mJbA at mail.gmail.com
> >
> Content-Type: text/plain; charset=ISO-8859-1
>
> Hi,
>
> On Windows XP, I'm retreiving interface stats using the IP Helper API
> - GetIfTable(). However, it looks like packets transmitted using
> WinPCAP APIs - pcap_sendpacket()/pcap_sendqueue_transmit() are not
> being counted. Is this expected? I'm using WinPcap 4.1.2.
>
> Isn't the stats returned by GetIfTable() equivalent to the IfMIB
> stats? If not, would anyone know which Win32 API would return the
> same?
>
> Regards,
> Srivats
> (http://ostinato.org)
>
>
> ------------------------------
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>
>
> End of Winpcap-users Digest, Vol 76, Issue 12
> *********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20110719/514fbcf9/attachment.html>