Luca,

I just tested my code now with the latest revision of pfring, same problem. 
Pcount works fine.

My code is in freepascal. It worked fine before with libpcap but I guess I’ll 
have to investigate a bit more, maybe some parts of the header translations are 
not 100% correct. It also seems that it has nothing to do with the filter 
because even pcap_next and pcap_next_ex return the same “socket operation on 
non-socket” error although pcap_open_live does not return an error.

Best regards,

Tom


From: [email protected] 
[mailto:[email protected]] On Behalf Of Luca Deri
Sent: woensdag 9 november 2011 14:53
To: [email protected]
Cc: [email protected]
Subject: Re: [Ntop-misc] Warning: Kernel filter failed: Socket operation on 
non-socket

Tom
We just tested the code and it works fine for us. Can you please reproduce the 
problem using pcount or share your code with us?

Regards Luca

Sent from my iPad

On 09/nov/2011, at 09:33, Tom Carly 
<[email protected]<mailto:[email protected]>> wrote:
Hi,

I have program that works fine with normal libpcap. When using the libpcap.a 
compiled with pf_ring 5.0 support, I get this error:

Warning: Kernel filter failed: Socket operation on non-socket

It seems that the pcap_compile and pcap_setfilter functions are triggering this 
error. I’m using simple bpf filters (e.g. ether[45] < 0x16 and ether[23]==0)

Any idea what can be the reason for this?

Thanks,

Tom



_______________________________________________
Ntop-misc mailing list
[email protected]<mailto:[email protected]>
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to