.\" Copyright (c) 1994, 1996, 1997 .\" The Regents of the University of California. All rights reserved. .\" .\" Redistribution and use in source and binary forms, with or without .\" modification, are permitted provided that: (1) source code distributions .\" retain the above copyright notice and this paragraph in its entirety, (2) .\" distributions including binary code include the above copyright notice and .\" this paragraph in its entirety in the documentation or other materials .\" provided with the distribution, and (3) all advertising materials mentioning .\" features or use of this software display the following acknowledgement: .\" ``This product includes software developed by the University of California, .\" Lawrence Berkeley Laboratory and its contributors.'' Neither the name of .\" the University nor the names of its contributors may be used to endorse .\" or promote products derived from this software without specific prior .\" written permission. .\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED .\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF .\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. .\" .TH PCAP_OPEN_DEAD 3PCAP "3 January 2014" .SH NAME pcap_open_dead, pcap_open_dead_with_tstamp_precision \- open a fake pcap_t for compiling filters or opening a capture for output .SH SYNOPSIS .nf .ft B #include <pcap/pcap.h> .ft .LP .ft B pcap_t *pcap_open_dead(int linktype, int snaplen); pcap_t *pcap_open_dead_with_tstamp_precision(int linktype, int snaplen, u_int precision); .ft .fi .SH DESCRIPTION .PP .B pcap_open_dead() and .B pcap_open_dead_with_tstamp_precision() are used for creating a .B pcap_t structure to use when calling the other functions in libpcap. It is typically used when just using libpcap for compiling BPF code; it can also be used if using .BR pcap_dump_open() , .BR pcap_dump() , and .B pcap_dump_close() to write a savefile if there is no .B pcap_t that supplies the packets to be written. .PP .I linktype specifies the link-layer type for the .BR pcap_t . .PP .I snaplen specifies the snapshot length for the .BR pcap_t . .PP When .BR pcap_open_dead_with_tstamp_precision() , is used to create a .B pcap_t for use with .BR pcap_dump_open() , .I precision specifies the time stamp precision for packets; .B PCAP_TSTAMP_PRECISION_MICRO should be specified if the packets to be written have time stamps in seconds and microseconds, and .B PCAP_TSTAMP_PRECISION_NANO should be specified if the packets to be written have time stamps in seconds and nanoseconds. Its value does not affect .BR pcap_compile() . .SH SEE ALSO pcap(3PCAP), pcap_compile(3PCAP), pcap_dump_open(3PCAP), \%pcap-linktype(@MAN_MISC_INFO@) |