Examples of org.jnetpcap.PcapBpfProgram

org.jnetpcap.PcapBpfProgram

Class peered with native bpf_program structure. Instance of a compiled Berkley Packet Filter program. The program is an interpreted binary byte program. Most modern unix and windows systems have a BPF interpreter builtin and execute the code very efficiently, close to the source of the capture and use the filter to permit or reject packets early.

Special note:
There also 2 private constructors which allow the object to be initialized in Java space with a BPF program. The corresponding native C structures are created and can be passed to Pcap.setFilter method. At this time, the constructors are kept private for further testing. At some point these private constructors will be made public and will allow outside filters to be used with Pcap capture sessions. @author Mark Bednarczyk @author Sly Technologies, Inc.


    final Pcap pcap = Pcap.openOffline(file, errbuf);
    assertNotNull(errbuf.toString());


    if (filter != null) {
      PcapBpfProgram prog = new PcapBpfProgram();
      if (pcap.compile(prog, filter, 0, 0xffffff00) != Pcap.OK) {
        System.err.printf("pcap filter %s: %s\n", pcap.getErr(), filter);
        return null;
      }
      pcap.setFilter(prog);

    if ((pcap = Pcap.openOffline(file, errbuf)) == null) {
      fail(errbuf.toString());
    }


    if (filter != null) {
      PcapBpfProgram program = new PcapBpfProgram();
      if (pcap.compile(program, filter, 0, 0) != Pcap.OK) {
        System.err.printf("pcap filter err: %s\n", pcap.getErr());
      }


      pcap.setFilter(program);

Examples of org.jnetpcap.PcapBpfProgram

Related Classes of org.jnetpcap.PcapBpfProgram