[lkml]   [2000]   [Aug]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
On Sat, Aug 26, 2000 at 09:36:21AM -0800, Mao Yun wrote:
> Hi, all.
> I'm looking at the source code of LSF(Linux Socket Filter). I am a rookie in kernel hacking. I use the libpcap-0.4 which is patched for LSF.When I set the snap_len 1500 ( the MTU in ethernet) and set a filter such as "tcp and port 80", all the packet I sniff out will be filled with zero in the last 14 bytes (more or less maybe) . What's wrong? Now my solution is enlarge the snap_len into 1600. :-) My kernel version is 2.2.14, the default choice of RedHat 6.2.

It must be a bug in libpcap, the kernel should do it correctly.

> When I look into the kernel source, I found it strange that I can only find the declaration of sk_run_filter(), but I cannot find any function which call sk_run_filter() except a EXPORT_SYMBOL(sk_run_filter). Why?

You didn't look hard enough ? Check include/net/sock.h


P.S.: please always use newlines every 80 characters in email.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 12:38    [W:0.047 / U:2.292 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site