Filter incoming or leaving packets

[Johan Mazel <johan.mazel () gmail com>]

Hello
I would like to know if there is a way to use pcap_compile() to filter only
incoming packets or only leaving packets in a host/network interface ?
I search in the snort doc and in this tutorial (
http://yuba.stanford.edu/~casado/pcap/section3.html), I found stuff linked
to the filtering of packets coming or going from/to one host in particular
but nothing about incoming/leaving packets.
Thanks in advance for the help.
Johan Mazel
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.