|
Packit |
209cc3 |
.\" Copyright (c) 1994, 1996, 1997
|
|
Packit |
209cc3 |
.\" The Regents of the University of California. All rights reserved.
|
|
Packit |
209cc3 |
.\"
|
|
Packit |
209cc3 |
.\" Redistribution and use in source and binary forms, with or without
|
|
Packit |
209cc3 |
.\" modification, are permitted provided that: (1) source code distributions
|
|
Packit |
209cc3 |
.\" retain the above copyright notice and this paragraph in its entirety, (2)
|
|
Packit |
209cc3 |
.\" distributions including binary code include the above copyright notice and
|
|
Packit |
209cc3 |
.\" this paragraph in its entirety in the documentation or other materials
|
|
Packit |
209cc3 |
.\" provided with the distribution, and (3) all advertising materials mentioning
|
|
Packit |
209cc3 |
.\" features or use of this software display the following acknowledgement:
|
|
Packit |
209cc3 |
.\" ``This product includes software developed by the University of California,
|
|
Packit |
209cc3 |
.\" Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
|
|
Packit |
209cc3 |
.\" the University nor the names of its contributors may be used to endorse
|
|
Packit |
209cc3 |
.\" or promote products derived from this software without specific prior
|
|
Packit |
209cc3 |
.\" written permission.
|
|
Packit |
209cc3 |
.\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
|
|
Packit |
209cc3 |
.\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
|
|
Packit |
209cc3 |
.\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
|
|
Packit |
209cc3 |
.\"
|
|
Packit |
209cc3 |
.TH PCAP_OPEN_LIVE 3PCAP "6 December 2017"
|
|
Packit |
209cc3 |
.SH NAME
|
|
Packit |
209cc3 |
pcap_open_live \- open a device for capturing
|
|
Packit |
209cc3 |
.SH SYNOPSIS
|
|
Packit |
209cc3 |
.nf
|
|
Packit |
209cc3 |
.ft B
|
|
Packit |
209cc3 |
#include <pcap/pcap.h>
|
|
Packit |
209cc3 |
.ft
|
|
Packit |
209cc3 |
.LP
|
|
Packit |
209cc3 |
.nf
|
|
Packit |
209cc3 |
.ft B
|
|
Packit |
209cc3 |
char errbuf[PCAP_ERRBUF_SIZE];
|
|
Packit |
209cc3 |
.ft
|
|
Packit |
209cc3 |
.LP
|
|
Packit |
209cc3 |
.ft B
|
|
Packit |
209cc3 |
pcap_t *pcap_open_live(const char *device, int snaplen,
|
|
Packit |
209cc3 |
.ti +8
|
|
Packit |
209cc3 |
int promisc, int to_ms, char *errbuf);
|
|
Packit |
209cc3 |
.ft
|
|
Packit |
209cc3 |
.fi
|
|
Packit |
209cc3 |
.SH DESCRIPTION
|
|
Packit |
209cc3 |
.B pcap_open_live()
|
|
Packit |
209cc3 |
is used to obtain a packet capture handle to look
|
|
Packit |
209cc3 |
at packets on the network.
|
|
Packit |
209cc3 |
.I device
|
|
Packit |
209cc3 |
is a string that specifies the network device to open; on Linux systems
|
|
Packit |
209cc3 |
with 2.2 or later kernels, a
|
|
Packit |
209cc3 |
.I device
|
|
Packit |
209cc3 |
argument of "any" or
|
|
Packit |
209cc3 |
.B NULL
|
|
Packit |
209cc3 |
can be used to capture packets from all interfaces.
|
|
Packit |
209cc3 |
.PP
|
|
Packit |
209cc3 |
.I snaplen
|
|
Packit |
209cc3 |
specifies the snapshot length to be set on the handle.
|
|
Packit |
209cc3 |
.PP
|
|
Packit |
209cc3 |
.I promisc
|
|
Packit |
209cc3 |
specifies if the interface is to be put into promiscuous mode.
|
|
Packit |
209cc3 |
.PP
|
|
Packit |
209cc3 |
.I to_ms
|
|
Packit |
209cc3 |
specifies the packet buffer timeout, as a non-negative value, in
|
|
Packit |
209cc3 |
milliseconds. (See
|
|
Packit |
209cc3 |
.BR pcap (3PCAP)
|
|
Packit |
209cc3 |
for an explanation of the packet buffer timeout.)
|
|
Packit |
209cc3 |
.SH RETURN VALUE
|
|
Packit |
209cc3 |
.B pcap_open_live()
|
|
Packit |
209cc3 |
returns a
|
|
Packit |
209cc3 |
.I pcap_t *
|
|
Packit |
209cc3 |
on success and
|
|
Packit |
209cc3 |
.B NULL
|
|
Packit |
209cc3 |
on failure.
|
|
Packit |
209cc3 |
If
|
|
Packit |
209cc3 |
.B NULL
|
|
Packit |
209cc3 |
is returned,
|
|
Packit |
209cc3 |
.I errbuf
|
|
Packit |
209cc3 |
is filled in with an appropriate error message.
|
|
Packit |
209cc3 |
.I errbuf
|
|
Packit |
209cc3 |
may also be set to warning text when
|
|
Packit |
209cc3 |
.B pcap_open_live()
|
|
Packit |
209cc3 |
succeeds; to detect this case the caller should store a zero-length string in
|
|
Packit |
209cc3 |
.I errbuf
|
|
Packit |
209cc3 |
before calling
|
|
Packit |
209cc3 |
.B pcap_open_live()
|
|
Packit |
209cc3 |
and display the warning to the user if
|
|
Packit |
209cc3 |
.I errbuf
|
|
Packit |
209cc3 |
is no longer a zero-length string.
|
|
Packit |
209cc3 |
.I errbuf
|
|
Packit |
209cc3 |
is assumed to be able to hold at least
|
|
Packit |
209cc3 |
.B PCAP_ERRBUF_SIZE
|
|
Packit |
209cc3 |
chars.
|
|
Packit |
209cc3 |
.SH SEE ALSO
|
|
Packit |
209cc3 |
pcap_create(3PCAP), pcap_activate(3PCAP)
|