As Guy Harris said:
>
> If you have a SunOS 4.x machine handy, the "NIT(4P)" man page, and the
> man pages it refers you to, give details.
I no longer do. Can someone send that manpage to the list, please?
> modules. A document on using it, and some sample code that uses it, can
> be found at
>
> http://metalab.unc.edu/pub/sun-info/development-tools/dltest.tar.Z
thanks
> They're not alternatives to "libpcap"; instead, they're facilities
> *used* by "libpcap". "libpcap" hides from the application the
> particular facility underneath it; the "pcap-XXX.c" files implement the
> "live capture" facility of "libpcap" atop various underlying mechanims:
right. I wasn't thinking; or rather, my half-asleep mind confused "libpcap"
and "BPF". :)
What would be nice, then, is to make wiretap produce BPF, NIT, and DLPI
"code" from the same filter string. That was the promise of libpcap, but it
hasn't been officially patched/improved in a while now. (June 1997?)
And RMON too, huh?
--gilbert
--
Gilbert Ramirez Voice: +1 210 358 4032
Technical Services Fax: +1 210 358 1122
University Health System San Antonio, Texas, USA
