tcpdump mailing list archives
Re: Question about "pcap_next()"
From: Guy Harris <guy () alum mit edu>
Date: Mon, 01 Nov 2004 23:54:35 -0800
(Blah blah blah another wrong from line blah blah blah avoid the duplicate message detector blah blah blah.)
Kathy Chen wrote:
When I call u_char *packet = pcap_next(handle, &header);I can get the packet length value, but I can't really get the "packet" data (Using printf(..., packet)).
The packet data isn't a text string. It's raw binary data. Extract the separate fields from the raw packet data, and print that. (See tcpdump as an example of a program that dissects raw binary packet data.) - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- Question about "pcap_next()" Kathy Chen (Nov 01)
- Re: Question about "pcap_next()" Sebastien Vincent (Nov 01)
- Re: Question about "pcap_next()" Kathy Chen (Nov 02)
- Re: Question about "pcap_next()" Guy Harris (Nov 01)
- Re: Question about "pcap_next()" Sebastien Vincent (Nov 01)