tcpdump mailing list archives

Re: Question about "pcap_next()"


From: Guy Harris <guy () alum mit edu>
Date: Mon, 01 Nov 2004 23:54:35 -0800

(Blah blah blah another wrong from line blah blah blah avoid the duplicate message detector blah blah blah.)

Kathy Chen wrote:

When I call u_char *packet = pcap_next(handle, &header);
I can get the packet length value, but I can't really
get the "packet" data (Using printf(..., packet)).

The packet data isn't a text string.  It's raw binary data.  Extract the
separate fields from the raw packet data, and print that.  (See tcpdump
as an example of a program that dissects raw binary packet data.)

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Current thread: