For many years, WinPcap has been recognized as the industry-standard tool for link-layer network access in Windows environments, allowing applications to capture and transmit network packets …

Introduction This Manual describes the programming interface and the source code of WinPcap. It provides detailed descriptions of the functions and structures exported to programmers, along with …

The file is opened with pcap_open_offline (), then the usual pcap_loop () is used to sequence through the packets. As you can see, reading packets from an offline capture is nearly identical to receiving …

While pcap_sendpacket () offers a simple and immediate way to send a single packet, send queues provides an advanced, powerful and optimized mechanism to send a collection of packets.

The functions used to filter packets are pcap_compile () and pcap_setfilter (). pcap_compile () takes a string containing a high-level Boolean (filter) expression and produces a low-level byte code that can …

pcap_compile_nopcap () is similar to pcap_compile () except that instead of passing a pcap structure, one passes the snaplen and linktype explicitly. It is intended to be used for compiling filters for direct …

In this lesson we'll write a program that prints some information about each packet flowing through the adapter. The function that opens a capture device is pcap_open (). The parameters, snaplen, flags …

Both libpcap and WinPcap provide the pcap_findalldevs_ex () function for this purpose: this function returns a linked list of pcap_if structures, each of which contains comprehensive information about …

Oct 19, 2009 · The problem is due to the fact that the standard WinPcap include file "pcap.h" contains only a forward declaration of "struct pcap", but not the actual definition of it.

PCAP_IF_ interface flags. Currently the only possible flag is PCAP_IF_LOOPBACK, that is set if the interface is a loopback interface. Definition at line 153 of file incs/pcap.h.