Re: capturing on both interfaces simultaneously

[Guy Harris <guy () alum mit edu>]

On Dec 10, 2011, at 7:39 AM, abhinav narain wrote:

> Can I use pcap_loop when using select,

No.

You can, however, use pcap_dispatch().  pcap_loop() loops either indefinitely or until it sees the specified number of 
packets; it will try to read more packets from the underlying descriptor, and thus potentially block.  pcap_dispatch() 
will read more packets from the descriptor at most once, so it's more appropriate to call if select() or poll() reports 
the selectable descriptor for a pcap_t as having packets available.  Pass it a "cnt" argument of -1, so it processes 
all the packets in the batch that it reads, and thus does a read at the beginning of each call.-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.