On (01/04/17 10:03), Willem de Bruijn wrote: > > This approach is less restrictive. It still allows incorrect packets > to be enqueued in the time between the socket call and attaching the > bpf filter. Also, if packets are restricted to a single packet, using > bind with sll_ifindex is simpler.
Do you want me to change this to first set up pfsocket() with proto 0, then set up filter, and then bind_ring() to the desired ifindex with ETH_P_ALL? I can spin out v2 (and if I have to that, I can also fix the comments) if you feel strongly about it. --Sowmini
