mirror of
https://github.com/freebsd/freebsd-src.git
synced 2024-11-30 08:43:23 +00:00
6f9cba8f8b
Local changes: - In contrib/libpcap/pcap/bpf.h, do not include pcap/dlt.h. Our system net/dlt.h is pulled in from net/bpf.h. - sys/net/dlt.h: Incorporate changes from libpcap 1.10.3. - lib/libpcap/Makefile: Update for libpcap 1.10.3. Changelog: https://git.tcpdump.org/libpcap/blob/95691ebe7564afa3faa5c6ba0dbd17e351be455a:/CHANGES Reviewed by: emaste Obtained from: https://www.tcpdump.org/release/libpcap-1.10.3.tar.gz Sponsored by: The FreeBSD Foundation
94 lines
3.0 KiB
Plaintext
94 lines
3.0 KiB
Plaintext
.\" Copyright (c) 1994, 1996, 1997
|
|
.\" The Regents of the University of California. All rights reserved.
|
|
.\"
|
|
.\" Redistribution and use in source and binary forms, with or without
|
|
.\" modification, are permitted provided that: (1) source code distributions
|
|
.\" retain the above copyright notice and this paragraph in its entirety, (2)
|
|
.\" distributions including binary code include the above copyright notice and
|
|
.\" this paragraph in its entirety in the documentation or other materials
|
|
.\" provided with the distribution, and (3) all advertising materials mentioning
|
|
.\" features or use of this software display the following acknowledgement:
|
|
.\" ``This product includes software developed by the University of California,
|
|
.\" Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
|
|
.\" the University nor the names of its contributors may be used to endorse
|
|
.\" or promote products derived from this software without specific prior
|
|
.\" written permission.
|
|
.\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
|
|
.\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
|
|
.\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
|
|
.\"
|
|
.TH PCAP_COMPILE 3PCAP "22 August 2018"
|
|
.SH NAME
|
|
pcap_compile \- compile a filter expression
|
|
.SH SYNOPSIS
|
|
.nf
|
|
.ft B
|
|
#include <pcap/pcap.h>
|
|
.ft
|
|
.LP
|
|
.ft B
|
|
int pcap_compile(pcap_t *p, struct bpf_program *fp,
|
|
.ti +8
|
|
const char *str, int optimize, bpf_u_int32 netmask);
|
|
.ft
|
|
.fi
|
|
.SH DESCRIPTION
|
|
.BR pcap_compile ()
|
|
is used to compile the string
|
|
.I str
|
|
into a filter program. See
|
|
.BR \%pcap-filter (@MAN_MISC_INFO@)
|
|
for the syntax of that string.
|
|
.I fp
|
|
is a pointer to a
|
|
.I bpf_program
|
|
struct and is filled in by
|
|
.BR pcap_compile ().
|
|
.I optimize
|
|
controls whether optimization on the resulting code is performed.
|
|
.I netmask
|
|
specifies the IPv4 netmask of the network on which packets are being
|
|
captured; it is used only when checking for IPv4 broadcast addresses in
|
|
the filter program. If the netmask of the network on which packets are
|
|
being captured isn't known to the program, or if packets are being
|
|
captured on the Linux "any" pseudo-interface that can capture on more
|
|
than one network, a value of
|
|
.B PCAP_NETMASK_UNKNOWN
|
|
can be supplied; tests
|
|
for IPv4 broadcast addresses will fail to compile, but all other tests in
|
|
the filter program will be OK.
|
|
.LP
|
|
NOTE: in libpcap 1.8.0 and later,
|
|
.BR pcap_compile ()
|
|
can be used in multiple threads within a single process. However, in
|
|
earlier versions of libpcap, it is
|
|
.I not
|
|
safe to use
|
|
.BR pcap_compile ()
|
|
in multiple threads in a single process without some form of mutual
|
|
exclusion allowing only one thread to call it at any given time.
|
|
.SH RETURN VALUE
|
|
.BR pcap_compile ()
|
|
returns
|
|
.B 0
|
|
on success and
|
|
.B PCAP_ERROR
|
|
on failure. If
|
|
.B PCAP_ERROR
|
|
is returned,
|
|
.BR pcap_geterr (3PCAP)
|
|
or
|
|
.BR pcap_perror (3PCAP)
|
|
may be called with
|
|
.I p
|
|
as an argument to fetch or display the error text.
|
|
.SH BACKWARD COMPATIBILITY
|
|
.PP
|
|
The
|
|
.B PCAP_NETMASK_UNKNOWN
|
|
constant became available in libpcap release 1.1.0.
|
|
.SH SEE ALSO
|
|
.BR pcap (3PCAP),
|
|
.BR pcap_setfilter (3PCAP),
|
|
.BR pcap_freecode (3PCAP)
|