PCAP_CREATE(3PCAP)PCAP_CREATE(3PCAP)NAMEpcap_create - create a live capture handle
SYNOPSIS
#include <pcap/pcap.h>
char errbuf[PCAP_ERRBUF_SIZE];
pcap_t *pcap_create(const char *source, char *errbuf);
DESCRIPTIONpcap_create() is used to create a packet capture handle to look at
packets on the network. source is a string that specifies the network
device to open; on Linux systems with 2.2 or later kernels, a source
argument of "any" or NULL can be used to capture packets from all
interfaces.
On Darwin systems version 13 or later, a source argument of "all" or
"any" can be used to capture packets from all interfaces. A source
argument of NULL can be used to capture packets from all physical
interfaces, i.e. excluding loopback, virtual and tunnel interfaces.
The returned handle must be activated with pcap_activate() before pack‐
ets can be captured with it; options for the capture, such as promiscu‐
ous mode, can be set on the handle before activating it.
RETURN VALUEpcap_create() returns a pcap_t * on success and NULL on failure. If
NULL is returned, errbuf is filled in with an appropriate error mes‐
sage. errbuf is assumed to be able to hold at least PCAP_ERRBUF_SIZE
chars.
SEE ALSOpcap(3PCAP), pcap_activate(3PCAP)
5 April 2008 PCAP_CREATE(3PCAP)
