Ethereal-users: Re: [Ethereal-users] Doubt on WinPcap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 20 May 2002 12:03:22 -0700
On Mon, May 20, 2002 at 04:57:21PM +0100, pradeep kumar wrote:
> I am a student at the Indian Institute of Information
> Technology, Trivandrum, India. For my project which is
> part of my course work, I have to develop a tool which
> can count the number of broadcast packets in the LAN.
> I used the functions available in WinPcap but I find
> that it captures only one single packet and gives it
> details. How can I find the details of all broadcast
> packets?

This is a WinPcap question, not an Ethereal question.  It should be
asked on the WinPcap users' mailing list, after checking WinPcap
documentation, the WinPcap FAQ, and the archives of the WinPcap users'
mailing list.

The WinPcap site is at

	http://winpcap.polito.it/

and the WinPcap documentation is at

	http://winpcap.polito.it/docs/default.htm

and the WinPcap FAQ is at

	http://winpcap.polito.it/misc/faq.htm

and the WinPcap mailing list archives, and the address of the WinPcap
mailing list, is at

	http://winpcap.polito.it/contact.htm

WinPcap is a port to Windows of libpcap, so this might be a general
libpcap question; those questions should be asked on the tcpdump-users
mailing list; see the tcpdump.org Web site:

	http://www.tcpdump.org/

Note that libpcap/WinPcap, if you use "pcap_loop()", captures packets
forever; it supplies one packet at a time.  You would have to process
each of those packets as they are supplied to your program in order to
find information about all packets.