I should know better than to send HTML email to a list....sigh...
Resending ------- Hi: I just got started working with pcaplib (so this is probably a stupid question from a newbie), but anyway - in the pcap programming sample, the device netmask is handed to pcap_compile. However, the capture being done is in promiscuous mode. What if the network mask for your capture does not match the network mask for the network you are monitoring? Follow that stupid question up with this one - why does pcap_compile even NEED the netmask if you're not using any 'net' rules? and does it matter what you give it in the instance of capturing a rule such as 'port 23'? Rich Gautier Dynamics Research Corp Personal Website - http://rgautier.tripod.com - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
