Ethereal-dev: Re: [Ethereal-dev] Stop capture trigger. RFC

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 25 Jun 2003 09:52:53 -0700

On Wednesday, June 25, 2003, at 9:48AM, Guy Harris wrote:
Or you could just do it with one capture session, by compiling the stop trigger into BPF and running "bpf_filter()" on the incoming packets, and stopping the capture when one matches.
...although if you also have a capture filter you'd also have to use, as the libpcap capture filter, the OR of the two filter expressions, and run the capture filter on all incoming packets and discard packets that don't match.