pcap_offline_filter - check whether a filter matches a packet
#include <pcap/pcap.h> int pcap_offline_filter(const struct bpf_program *fp, const struct pcap_pkthdr *h, const u_char *pkt)
PCAP_OFFLINE_FILTER(3pcap)
NAME
pcap_offline_filter - check whether a filter matches a packet
SYNOPSIS
#include <pcap/pcap.h>
int pcap_offline_filter(const struct bpf_program *fp,
const struct pcap_pkthdr *h, const u_char *pkt)
DESCRIPTION
pcap_offline_filter() checks whether a filter matches a packet. fp is
a pointer to a bpf_program struct, usually the result of a call to
pcap_compile(3PCAP). h points to the pcap_pkthdr structure for the
packet, and pkt points to the data in the packet.
RETURN VALUE
pcap_offline_filter() returns the return value of the filter program.
This will be zero if the packet doesn't match the filter and non-zero
if the packet matches the filter.
ATTRIBUTES
See attributes(7) for descriptions of the following attributes:
+---------------+------------------------+
|ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+---------------+------------------------+
|Availability | system/library/libpcap |
+---------------+------------------------+
|Stability | Uncommitted |
+---------------+------------------------+
SEE ALSO
pcap(3PCAP)
NOTES
Source code for open source software components in Oracle Solaris can
be found at https://www.oracle.com/downloads/opensource/solaris-source-
code-downloads.html.
This software was built from source available at
https://github.com/oracle/solaris-userland. The original community
source was downloaded from https://www.tcpdump.org/release/libp-
cap-1.9.1.tar.gz.
Further information about this software can be found on the open source
community website at https://www.tcpdump.org/.
7 April 2014
PCAP_OFFLINE_FILTER(3pcap)