pcap_create(3PCAP) man page
Updated: 3 January 2014 • View in plain text • Return to Main Contents
This man page documents libpcap version 1.10.0 (see also: git master branch, 1.10.2, 1.10.1, 1.9.1, 1.9.0, 1.8.1, 1.7.4, 1.6.2, 1.5.3).Your system may have a different version installed, possibly with some local modifications. To achieve the best results, please make sure this version of this man page suits your needs. If necessary, try to look for a different version on this web site or in the man pages available in your installation.
pcap_create - create a live capture handle
#include <pcap/pcap.h> char errbuf[PCAP_ERRBUF_SIZE]; pcap_t *pcap_create(const char *source, char *errbuf);
pcap_create() is used to create a packet capture handle to look at packets on the network. source is a string that specifies the network device to open; on Linux systems with 2.2 or later kernels, a source argument of "any" or NULL can be used to capture packets from all interfaces.
The returned handle must be activated with pcap_activate(3PCAP) before packets can be captured with it; options for the capture, such as promiscuous mode, can be set on the handle before activating it.
pcap_create() returns a pcap_t * on success and NULL on failure. If NULL is returned, errbuf is filled in with an appropriate error message. errbuf is assumed to be able to hold at least PCAP_ERRBUF_SIZE chars.
This HTML man page was generated at 12:27:44 GMT, October 07, 2021 from a source man page in "The Tcpdump Group" git repositories using man2html and other tools.