[Winpcap-users] Pcap_next_ex and pointer to packet data

[Matias Chapresto]

Hello,

 

I’m a beginner in Winpcap programming and I’d be so thankful if someone
could answer my question, I’ve been bashing my head for quite a while trying
to understand this.

I'm using pcap_next_ex to capture packets. And if I understand this right,
if I put a 1000ms timeout, then pcap_next_ex will fill out the buffer and
wait a second before returning. If that is the case, then what does the
packet_data* point to?

The data of the first packet? the last one? Because in 1 second, many
packets should've been processed, so when the function returns, where are
all the payloads of all those packets?

Thank you so for your guidance!

Matías

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20150722/f0068e25/attachment.html>