和我一起学libpcap(1)

char ebuf[PCAP_ERRBUF_SIZE];
pcap_t *pd = pcap_open_live("eth0", 68, 0, 1000, ebuf);

struct bpf_program fcode;
pcap_compile(pd, &fcode, NULL, 1, 0);

pcap_setfilter(pd, &fcode);

pcap_loop(pd, 10, eth_printer, NULL);

pcap_close(pd);

typedef void (*pcap_handler)(u_char *, const struct pcap_pkthdr *,
                         const u_char *);

#include "pcap.h"

char * pcap_lookupdev ( char * errbuf );

int pcap_lookupnet(char *, bpf_u_int32 *, bpf_u_int32 *, char *);

int pcap_datalink(pcap_t *);

int pcap_snapshot(pcap_t *);

int pcap_stats(pcap_t *, struct pcap_stat *);

struct pcap_stat {
        u_int ps_recv; /* number of packets received */
        u_int ps_drop; /* number of packets dropped */
        u_int ps_ifdrop; /* drops by interface XXX not yet supported */
};
int pcap_major_version(pcap_t *);
int pcap_minor_version(pcap_t *);

void eth_printer(u_char * user, const struct pcap_pkthdr * h, const u_char * p)
{
printf("I get one packet! ");
}