Lines Matching refs:bpf
23 "@(#) $Header: /tcpdump/master/libpcap/pcap-bpf.c,v 1.86.2.12 2007/06/15 17:57:27 guy Exp $ (LBL)";
43 * Make "pcap.h" not include "pcap-bpf.h"; we are going to include the
51 * Prevent bpf.h from redefining the DLT_ values to their
56 #include <net/bpf.h>
74 #define BPF_NAME "bpf"
77 #define BPF_NODE "/dev/bpf"
83 #include <net/bpf.h>
121 * "ps_drop" counts packets dropped inside the BPF device
182 * operation in the bpf kernel extension
262 * Short-circuit evaluation: if using BPF filter
280 * AIX's BPF returns seconds/nanoseconds time
453 minors = genminor("bpf", major, 0, BPF_MINORS, 1, 1);
527 static const char device[] = "/dev/bpf";
535 * Load the bpf driver, if it isn't already loaded,
536 * and create the BPF device entries, if they don't
553 (void)snprintf(device, sizeof(device), "/dev/bpf%d", n++);
585 * We include the OS's <net/bpf.h>, not our "pcap-bpf.h", so we probably
643 "kernel bpf filter out of date");
660 * on BPF systems that don't have kernel malloc. And if
691 * AIX's BPF returns IFF_ types, not DLT_ types, in BIOCGDLT.
847 * BSDs - check CVS log for "bpf.c"?
880 * set is almost worse than useless if your BPF filter
888 * in the Winter 1993 USENIX paper on BPF, they say:
893 * per packet and BPF must collect the data from several
917 * doesn't get woken up for a BPF device until the buffer
951 * problems we have experienced from AIX BPF. */
978 * On most BPF platforms, either you can do a "select()" or
979 * "poll()" on a BPF file descriptor and it works correctly,
991 * the BPF descriptor into non-blocking mode, and read from
1004 * here". On all other BPF platforms, we set it to the FD for
1005 * the BPF device; in NetBSD, OpenBSD, and Darwin, a non-blocking
1059 * It looks that BPF code generated by gen_protochain() is not
1060 * compatible with some of kernel BPF code (for example BSD/OS 3.1).
1127 "Setting direction to PCAP_D_OUT is not supported on BPF");
