[tcpdump-workers] Multiple interface listening modification

Michal Sekletar msekleta at redhat.com
Thu Jun 4 03:37:38 EDT 2015


On 06/04/2015 07:28 AM, Tugrul Erdogan wrote:

> I am using libpcap 1.7.3 version and I need to listen multiple interface by
> same user process call. I am planning to patch libpcap to be able to use a
> socket array which will be attached different interfaces.

Can't you just pcap_open more interfaces and for each pcap_t* you get 
call pcap_fileno which will return back file descriptor for that 
capture. Then you can use select/epoll to multiplex on those descriptors.

Michal



More information about the tcpdump-workers mailing list