RawIP::libpcap(3pm)
NAME
Net::RawIP::libpcap - An interface to libpcap in Net::RawIP(3pm)
DESCRIPTION
Function The input parameters The output parameters
- open_live a network Return value is a pcap_t*
- device(eth0,ppp0,...); If retval less than zero
a snap length; then $err filled with
a promisc - boolean; an error string.
a timeout in sec;
$err is an undef scalar; - open_offline a filename which is filled Return value is pcap_t*
- with a raw output of dump; If retval less than zero
$err is an unfef scalar; then $err filled withan error string. - dump_open pcap_t*; Return value is a FILE*
- $err;
- lookupdev $err; Return value is a name
- of first device which is
found by libpcap - lookupnet a network device; a netnumber;
- a netnumer is undef; a netmask;
a netmask is undef; If retval less than zero
$err is undef; then $err filled withan error string. - dispatch a scalar with pcap_t*; No output parameters.
- number of packets for processing;
reference to the perl callback,this callback will be
called with 3 parameters:
$_[0] is fourth parameter
from dispatch,
$_[1] is a scalar with structure pcap_pkthdr for a current
packet,
$_[2] is a scalar with a current
packet;
fourth parameter could be
an array or a hash reference
or a pointer (FILE*) returned
by dump_open,it can be unreferenced in the perl callback or be used as a perl
filehandle in that callback. - loop As for dispatch. As for dispatch.
- dump As for a perl callback No output.
- but $_[0] must be a pointer
(FILE*) only. - compile a scalar with pcap_t*; a scalar with bpf_program.
- a bpf_program is undef; If retval is less than zero
a scalar with filter string; then there was a problem with a boolean value (optimize or filter grammar.
not);a scalar with netmask; - setfilter a scalar with pcap_t*; If retval is less than zero
- a scalar with bpf_program then there was a problem while returned by compile. settting filter.
- next a scalar with pcap_t*; A scalar with next packet;
- a scalar with with struc- a scalar with with structure
ture pcap_pkthdr for a current pcap_pkthdr also will be modi
packet,originally is undef. filed for an every packet and
it can be accessed but for read only.
- datalink a scalar with pcap_t*; Retval is the link layer type,
- e.g. DLT_EN10MB.
- snapshot a scalar with pcap_t*; Retval is the snapshot length
- specified when open_live was called.
- is_swapped a scalar with pcap_t*; returns true if the current
- savefile uses a different
byte order than the current
system. - major_version a scalar with pcap_t*; returns the major number
- of the version of the pcap
used to write the savefile. - minor_version a scalar with pcap_t*; returns the minor number of the
- version of the pcap used to
write the savefile. - file a scalar with pcap_t*; returns the name of the
- savefile.
- stats a scalar with pcap_t*; If retval 0 then a scalar
- a scalar with structure with structure pcap_stat will
pcap_stat,originally undef be filled with the
packet statistics.
- fileno a scalar with pcap_t*; returns the file descriptor
- number of the savefile.
A core perl function is
available as CORE::fileno. - geterr a scalar with pcap_t*; returns the error text
- pertaining to the last pcap
library error. - perror a scalar with pcap_t*; prints the text of the last
- a scalar with prefix; pcap library error on stderr,
prefixed by prefix.
- close a scalar with pcap_t*; closes the files associated with
- pcap_t* and deallocates
resources.
A core perl function is
available as CORE::close. - dump_close a scalar with pcap_t*; closes the savefile.
AUTHOR
Sergey Kolychev <ksv@al.lg.ua>