Hi:
I just got started working with pcaplib (so this is probably a stupid question from a newbie), but anyway - in the pcap programming sample, the device netmask is handed to pcap_compile. However, the capture being done is in promiscuous mode. What if the network mask for your capture does not match the network mask for the network you are monitoring?
Follow that stupid question up with this one - why does pcap_compile even NEED the netmask if you're not using any 'net' rules? and does it matter what you give it in the instance of capturing a rule such as 'port 23'?
Rich Gautier
Dynamics Research Corp
Personal Website - http://rgautier.tripod.com
Attachment is Public Key for the sender: [EMAIL PROTECTED]
smime.p7s
Description: application/pkcs7-signature
