12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879 |
- .\" Copyright (c) 1994, 1996, 1997
- .\" The Regents of the University of California. All rights reserved.
- .\"
- .\" Redistribution and use in source and binary forms, with or without
- .\" modification, are permitted provided that: (1) source code distributions
- .\" retain the above copyright notice and this paragraph in its entirety, (2)
- .\" distributions including binary code include the above copyright notice and
- .\" this paragraph in its entirety in the documentation or other materials
- .\" provided with the distribution, and (3) all advertising materials mentioning
- .\" features or use of this software display the following acknowledgement:
- .\" ``This product includes software developed by the University of California,
- .\" Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
- .\" the University nor the names of its contributors may be used to endorse
- .\" or promote products derived from this software without specific prior
- .\" written permission.
- .\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
- .\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
- .\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
- .\"
- .TH PCAP_OPEN_DEAD 3PCAP "3 January 2014"
- .SH NAME
- pcap_open_dead, pcap_open_dead_with_tstamp_precision \- open a fake
- pcap_t for compiling filters or opening a capture for output
- .SH SYNOPSIS
- .nf
- .ft B
- #include <pcap/pcap.h>
- .ft
- .LP
- .ft B
- pcap_t *pcap_open_dead(int linktype, int snaplen);
- pcap_t *pcap_open_dead_with_tstamp_precision(int linktype, int snaplen,
- u_int precision);
- .ft
- .fi
- .SH DESCRIPTION
- .PP
- .B pcap_open_dead()
- and
- .B pcap_open_dead_with_tstamp_precision()
- are used for creating a
- .B pcap_t
- structure to use when calling the other functions in libpcap. It is
- typically used when just using libpcap for compiling BPF code; it can
- also be used if using
- .BR pcap_dump_open() ,
- .BR pcap_dump() ,
- and
- .B pcap_dump_close()
- to write a savefile if there is no
- .B pcap_t
- that supplies the packets to be written.
- .PP
- .I linktype
- specifies the link-layer type for the
- .BR pcap_t .
- .PP
- .I snaplen
- specifies the snapshot length for the
- .BR pcap_t .
- .PP
- When
- .BR pcap_open_dead_with_tstamp_precision() ,
- is used to create a
- .B pcap_t
- for use with
- .BR pcap_dump_open() ,
- .I precision
- specifies the time stamp precision for packets;
- .B PCAP_TSTAMP_PRECISION_MICRO
- should be specified if the packets to be written have time stamps in
- seconds and microseconds, and
- .B PCAP_TSTAMP_PRECISION_NANO
- should be specified if the packets to be written have time stamps in
- seconds and nanoseconds. Its value does not affect
- .BR pcap_compile() .
- .SH SEE ALSO
- pcap(3PCAP), pcap_compile(3PCAP), pcap_dump_open(3PCAP),
- \%pcap-linktype(7)
|