Re: detailed description of linux socket filter and sniffing problem

Alan Cox (alan@lxorguk.ukuu.org.uk)
Fri, 6 Jul 2001 12:23:19 +0100 (BST)

> 5) so i remove the filter expression by means of setsockopt
> SO_DETACH_FILTER and then regenrate the bpfcode for the nw expression.
>
> 6) now i do a attach operation on the socket by means of setsockopt and
> so attach the new filter.

You can just issue a new SO_ATTACH_FILTER and it will swap them over rather
than having an 'all packets' time. You will have some buffered frames matching
the old filter
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/