Date: Tue, 25 Jan 2005 06:41:54 -0800 (PST) From: "Kamal R. Prasad" <kamalpr@yahoo.com> To: DJF <deiif@yahoo.com>, hackers@freebsd.org Subject: Re: Rawsock bpf mambo jambo? Message-ID: <20050125144154.11125.qmail@web52710.mail.yahoo.com> In-Reply-To: <20050125094646.GA969@nexus.hta.fhz.ch>
next in thread | previous in thread | raw e-mail | index | archive | help
bpf is a packet filter -which can be used to snoop on all packets at the interface at the link level. You would have to create a socket to do I/O, but the snooper can mess around with the existing connection. regards -kamal --- DJF <deiif@yahoo.com> wrote: > Hi everybody, > > I've recently been looking into raw socket > programming. However there's still a question that > remains. Maybe it's just a case of RTFM, if so point > me to a good manual on the topic. > The man pages indicate that you can do read and > write operations with rawsock aswell as bpf. > However, in all of the source codes I found, a raw > socket was used to write to, and bpf was used to > read from the interface. > > What's the advantage in using the rawsock bpf > combination instead of > bpf (or raw socket) only? > > Thx in advance, > dave > > -- > Encrypt your emails! My PGPkeyID: 0xA37C182D > _ > ( ) ASCII Ribbon Campaign against > X HTML mail and news > / \ > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to > "freebsd-hackers-unsubscribe@freebsd.org" > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050125144154.11125.qmail>