PCAP_OPEN_DEAD(3PCAP)PCAP_OPEN_DEAD(3PCAP)NAMEpcap_open_dead - open a fake pcap_t for compiling filters or opening a
capture for output
SYNOPSIS
#include <pcap/pcap.h>
pcap_t *pcap_open_dead(int linktype, int snaplen);
DESCRIPTIONpcap_open_dead() is used for creating a pcap_t structure to use when
calling the other functions in libpcap. It is typically used when just
using libpcap for compiling BPF code.
linktype specifies the link-layer type for the pcap_t.
snaplen specifies the snapshot length for the pcap_t.
SEE ALSOpcap(3PCAP), pcap-linktype(5)ATTRIBUTES
See attributes(5) for descriptions of the following attributes:
┌────────────────────┬─────────────────────────┐
│ ATTRIBUTE TYPE │ ATTRIBUTE VALUE │
├────────────────────┼─────────────────────────┤
│Availability │ system/library/libpcap │
├────────────────────┼─────────────────────────┤
│Interface Stability │ Uncommitted │
└────────────────────┴─────────────────────────┘
NOTES
Source for libpcap is available at http://opensolaris.org and at
http://www.tcpdump.org. Documentation is available at
file:///usr/share/man, and http://www.tcpdump.org.
5 April 2008 PCAP_OPEN_DEAD(3PCAP)