[pcap 라이브러리] 9. 필터식 BSF 문법 확인 (pcap_compile, pcap_compile_nopcap)
필터식 BSF 문법 확인
pc_fake.c//pc_fake.c #include <pcap.h>
int main(int argc,char **argv){ char errbuf[PCAP_ERRBUF_SIZE]; pcap_t *device = pcap_open_dead(0,1024); if(device == 0){ printf("fail open_dead...%s\n",errbuf); return 0; }
struct bpf_program fcode;
if(pcap_compile(device,&fcode,argv[1], 0,0)<0){ printf("fail compile. check syntax\n"); return 3; }//if printf("success compile. %s syntax is available! \n",argv[1]); } |
아답터없이 필터식 확인
int pcap_compile_nopcap(int csize, int linktype, struct bpf_program *program,
const char *ｅxpression, int optimize, bpf_u_int32 mask);
//pc_compile_nopcap.c #include <pcap.h>
int main(int argc,char **argv){ char errbuf[PCAP_ERRBUF_SIZE]; /* pcap_t *device = pcap_open_dead(0,1024); if(device == 0){ printf("fail open_dead...%s\n",errbuf); return 0; } */ struct bpf_program fcode; pcap_compile_nopcap(1024,0,&fcode,argv[1],0,0);
/* if(pcap_compile(device,&fcode,argv[1], 0,0)<0){ printf("fail compile. check syntax\n"); return 3; }//if*/ printf("success compile. %s syntax is available! \n",argv[1]); } |