Varuna De Silva wrote:

> Next I removed the following part from the above code, and the build
> succeeded.
> if (pcap_add_if(alldevsp, "any", 0, any_descr, errbuf) < 0)
>         return (-1);
>
> Is this process acceptable of me removing the above part?

Yes.  That code is specific to Linux, which has a way in which a single
descriptor can be used to capture on all the machine's network interfaces;
the "any" device lets you use that from tcpdump/Wireshark/etc..  Windows
doesn't have that in NDIS, as far as I know (I think you have to bind to a
particular NDIS device), so the WinPcap driver can't provide that.


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.

Reply via email to