diff options
Diffstat (limited to 'contrib/libpcap/pcap_open_dead.3pcap.in')
| -rw-r--r-- | contrib/libpcap/pcap_open_dead.3pcap.in | 43 |
1 files changed, 35 insertions, 8 deletions
diff --git a/contrib/libpcap/pcap_open_dead.3pcap.in b/contrib/libpcap/pcap_open_dead.3pcap.in index 00df786..2d1b48c 100644 --- a/contrib/libpcap/pcap_open_dead.3pcap.in +++ b/contrib/libpcap/pcap_open_dead.3pcap.in @@ -1,5 +1,3 @@ -.\" @(#) $Header: /tcpdump/master/libpcap/pcap_open_dead.3pcap.in,v 1.1 2008-10-21 07:33:02 guy Exp $ -.\" .\" Copyright (c) 1994, 1996, 1997 .\" The Regents of the University of California. All rights reserved. .\" @@ -19,10 +17,10 @@ .\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF .\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. .\" -.TH PCAP_OPEN_DEAD 3PCAP "5 April 2008" +.TH PCAP_OPEN_DEAD 3PCAP "1 July 2013" .SH NAME -pcap_open_dead \- open a fake pcap_t for compiling filters or opening a -capture for output +pcap_open_dead, pcap_open_dead_with_tstamp_precision \- open a fake +pcap_t for compiling filters or opening a capture for output .SH SYNOPSIS .nf .ft B @@ -31,15 +29,27 @@ capture for output .LP .ft B pcap_t *pcap_open_dead(int linktype, int snaplen); +pcap_t *pcap_open_dead_with_tstamp_precision(int linktype, int snaplen, + u_int precision); .ft .fi .SH DESCRIPTION .PP .B pcap_open_dead() -is used for creating a +and +.B pcap_open_dead_with_tstamp_precision() +are used for creating a .B pcap_t structure to use when calling the other functions in libpcap. It is -typically used when just using libpcap for compiling BPF code. +typically used when just using libpcap for compiling BPF code; it can +also be used if using +.BR pcap_dump_open() , +.BR pcap_dump() , +and +.B pcap_dump_close() +to write a savefile if there is no +.B pcap_t +that supplies the packets to be written. .PP .I linktype specifies the link-layer type for the @@ -48,5 +58,22 @@ specifies the link-layer type for the .I snaplen specifies the snapshot length for the .BR pcap_t . +.PP +When +.BR pcap_open_dead_with_tstamp_precision() , +is used to create a +.B pcap_t +for use with +.BR pcap_dump_open() , +.I precision +specifies the time stamp precision for packets; +.B PCAP_TSTAMP_PRECISION_MICRO +should be specified if the packets to be written have time stamps in +seconds and microseconds, and +.B PCAP_TSTAMP_PRECISION_NANO +should be specified if the packets to be written have time stamps in +seconds and nanoseconds. Its value does not affect +.BR pcap_compile() . .SH SEE ALSO -pcap(3PCAP), pcap-linktype(@MAN_MISC_INFO@) +pcap(3PCAP), pcap_compile(3PCAP), pcap_dump_open(3PCAP), +pcap-linktype(@MAN_MISC_INFO@) |
