NAME

Net::RawIP::libpcap - An interface to libpcap in Net::RawIP(3pm)

DESCRIPTION

 Function    The input parameters           The output parameters

 open_live   a network                      Return value is a pcap_t*
             device(eth0,ppp0,...);         If retval less than zero
             a snap length;                 then $err filled with
             a promisc - boolean;           an error string.
	     a timeout in sec;               
	     $err is an undef scalar;

 open_offline   a filename which is filled  Return value is pcap_t*
                with a raw output of dump;  If retval less than zero
                $err is an unfef scalar;    then $err filled with
		                            an error string.

 dump_open  pcap_t*;                        Return value is a FILE*
            $err; 

 lookupdev  $err;			    Return value is a name
                                            of first device which is
					    found by libpcap

 lookupnet  a network device;               a netnumber;
            a netnumer is undef;            a netmask;    
	    a netmask is undef;             If retval less than zero
	    $err is undef;                  then $err filled with
				            an error string.
  
 dispatch   a scalar with pcap_t*;          No output parameters.
            number of packets for proce-
	    ssing;
	    reference to the perl call-
	    back,this callback will be
	    called with 3 parameters:
	    $_[0] is fourth parameter
	    from dispatch,
	    $_[1] is a scalar with struc-
	    ture pcap_pkthdr for a current
	    packet,
	    $_[2] is a scalar with a current
	    packet;
	    fourth parameter could be
	    an array or a hash reference
	    or a pointer (FILE*) returned
	    by dump_open,it can be unre-
	    ferenced in the perl call-
	    back or be used as a perl
	    filehandle in that callback.
  
 loop 	    As for dispatch.                As for dispatch.
  
 dump       As for a perl callback          No output. 
            but $_[0] must be a pointer 
	    (FILE*) only.

 compile    a scalar with pcap_t*;        a scalar with bpf_program. 
            a bpf_program is undef;       If retval is less than zero
	    a scalar with filter string;  then there was a problem with
	    a boolean value (optimize or  filter grammar.
	    not);
	      a scalar with netmask;

 setfilter  a scalar with pcap_t*;        If retval is less than zero
	    a scalar with bpf_program     then there was a problem while
	    returned by compile.          settting filter.
  
 next     a scalar with pcap_t*;          A scalar with next packet;
          a scalar with with struc-       a scalar with with structure
	  ture pcap_pkthdr for a current  pcap_pkthdr also will be modi
	  packet,originally is undef.     filed for an every packet and 
		                          it can be accessed but for read
					  only.
					      
 datalink  a scalar with pcap_t*;         Retval is the link  layer type,
                                          e.g. DLT_EN10MB.
	 						        		 
 snapshot  a scalar with pcap_t*;         Retval is the snapshot length 
                                          specified when open_live was 
					  called.		 	 	 
    
 is_swapped  a scalar with pcap_t*;       returns true if the current 
                                          savefile uses a different 
					  byte order than the current 
					  system.                   
  
 major_version  a scalar with pcap_t*;    returns the major number 
                                          of the version of the pcap 
					  used to write the savefile.
  
 minor_version  a scalar with pcap_t*;    returns the minor number of the
                                          version of the pcap used to 
					  write the savefile.

 file       a scalar with pcap_t*;        returns the name of the 
                                          savefile.
   											      					      
 stats      a scalar with pcap_t*;        If retval 0 then a scalar 
            a scalar with structure       with structure pcap_stat will
	    pcap_stat,originally undef    be filled with the 
                                          packet statistics.

 fileno    a scalar with pcap_t*;        returns  the  file descriptor 
                                         number of the savefile.
					 A core perl function is 
					 available as CORE::fileno.
					      
 geterr   a scalar with pcap_t*;         returns  the  error  text 
                                         pertaining to the last pcap 
				         library error.
					      
 perror   a scalar with pcap_t*;         prints the text of the last  
          a scalar with prefix;          pcap  library error on stderr, 
		                         prefixed by prefix.
  
 close    a scalar with pcap_t*;         closes the files associated with 
                                         pcap_t* and deallocates 
					 resources.
	                                 A core perl function is 
					 available as CORE::close.
											    
 dump_close  a scalar with pcap_t*;      closes the savefile.    					      

AUTHOR

Sergey Kolychev <ksv@al.lg.ua>

SEE ALSO

Net::RawIP(3pm),pcap(3).