Linux Certif

Toute la documentation sur la certification Linux LPI

Net::RawIP::libpcap.3pm

NAME

Net::RawIP::libpcap - An interface to libpcap in Net::RawIP(3pm)

DESCRIPTION

  Function    The input parameters           The output parameters
 
  open_live   a network                      Return value is a pcap_t*
              device(eth0,ppp0,...);         If retval less than zero
              a snap length;                 then $err filled with
              a promisc - boolean;           an error string.
              a timeout in sec;               
              $err is an undef scalar;
 
  open_offline   a filename which is filled  Return value is pcap_t*
                 with a raw output of dump;  If retval less than zero
                 $err is an unfef scalar;    then $err filled with
                                             an error string.
 
  dump_open  pcap_t*;                        Return value is a FILE*
             $err; 
 
  lookupdev  $err;                           Return value is a name
                                             of first device which is
                                             found by libpcap
 
  lookupnet  a network device;               a netnumber;
             a netnumer is undef;            a netmask;    
             a netmask is undef;             If retval less than zero
             $err is undef;                  then $err filled with
                                             an error string.
   
  dispatch   a scalar with pcap_t*;          No output parameters.
             number of packets for proce-
             ssing;
             reference to the perl call-
             back,this callback will be
             called with 3 parameters:
             $_[0] is fourth parameter
             from dispatch,
             $_[1] is a scalar with struc-
             ture pcap_pkthdr for a current
             packet,
             $_[2] is a scalar with a current
             packet;
             fourth parameter could be
             an array or a hash reference
             or a pointer (FILE*) returned
             by dump_open,it can be unre-
             ferenced in the perl call-
             back or be used as a perl
             filehandle in that callback.
   
  loop       As for dispatch.                As for dispatch.
   
  dump       As for a perl callback          No output. 
             but $_[0] must be a pointer 
             (FILE*) only.
 
  compile    a scalar with pcap_t*;        a scalar with bpf_program. 
             a bpf_program is undef;       If retval is less than zero
             a scalar with filter string;  then there was a problem with
             a boolean value (optimize or  filter grammar.
             not);
               a scalar with netmask;
 
  setfilter  a scalar with pcap_t*;        If retval is less than zero
             a scalar with bpf_program     then there was a problem while
             returned by compile.          settting filter.
   
  next     a scalar with pcap_t*;          A scalar with next packet;
           a scalar with with struc-       a scalar with with structure
           ture pcap_pkthdr for a current  pcap_pkthdr also will be modi
           packet,originally is undef.     filed for an every packet and 
                                           it can be accessed but for read
                                           only.
                                               
  datalink  a scalar with pcap_t*;         Retval is the link  layer type,
                                           e.g. DLT_EN10MB.
                                                                                  
  snapshot  a scalar with pcap_t*;         Retval is the snapshot length 
                                           specified when open_live was 
                                           called.                                
     
  is_swapped  a scalar with pcap_t*;       returns true if the current 
                                           savefile uses a different 
                                           byte order than the current 
                                           system.                   
   
  major_version  a scalar with pcap_t*;    returns the major number 
                                           of the version of the pcap 
                                           used to write the savefile.
   
  minor_version  a scalar with pcap_t*;    returns the minor number of the
                                           version of the pcap used to 
                                           write the savefile.
 
  file       a scalar with pcap_t*;        returns the name of the 
                                           savefile.
                                                                                                                                       
  stats      a scalar with pcap_t*;        If retval 0 then a scalar 
             a scalar with structure       with structure pcap_stat will
             pcap_stat,originally undef    be filled with the 
                                           packet statistics.
 
  fileno    a scalar with pcap_t*;        returns  the  file descriptor 
                                          number of the savefile.
                                          A core perl function is 
                                          available as CORE::fileno.
                                               
  geterr   a scalar with pcap_t*;         returns  the  error  text 
                                          pertaining to the last pcap 
                                          library error.
                                               
  perror   a scalar with pcap_t*;         prints the text of the last  
           a scalar with prefix;          pcap  library error on stderr, 
                                          prefixed by prefix.
   
  close    a scalar with pcap_t*;         closes the files associated with 
                                          pcap_t* and deallocates 
                                          resources.
                                          A core perl function is 
                                          available as CORE::close.
                                                                                             
  dump_close  a scalar with pcap_t*;      closes the savefile.
 
 

AUTHOR

Sergey Kolychev <ksv@al.lg.ua>

SEE ALSO

Net::RawIP(3pm),pcap(3).