For many years, WinPcap has been recognized as the industry-standard tool for link-layer network access in Windows environments, allowing applications to capture and transmit …

Introduction This Manual describes the programming interface and the source code of WinPcap. It provides detailed descriptions of the functions and structures exported to programmers, along …

The file is opened with pcap_open_offline (), then the usual pcap_loop () is used to sequence through the packets. As you can see, reading packets from an offline capture is nearly …

The functions used to filter packets are pcap_compile () and pcap_setfilter (). pcap_compile () takes a string containing a high-level Boolean (filter) expression and produces a low-level byte …

While pcap_sendpacket () offers a simple and immediate way to send a single packet, send queues provides an advanced, powerful and optimized mechanism to send a collection of …

The parameters of this function are the same as a capture callback -- it takes an adapter descriptor and a couple of pointers that will be initialized and returned to the user (one to a …

pcap_compile_nopcap () is similar to pcap_compile () except that instead of passing a pcap structure, one passes the snaplen and linktype explicitly. It is intended to be used for compiling …

Both libpcap and WinPcap provide the pcap_findalldevs_ex () function for this purpose: this function returns a linked list of pcap_if structures, each of which contains comprehensive …

In this lesson we'll write a program that prints some information about each packet flowing through the adapter. The function that opens a capture device is pcap_open (). The parameters, …

Manuals The WinPcap manual and tutorial: inside this manual you will find the documentation of the WinPcap API, a tutorial that will explain how to use the WinPcap functions with several …