Directly access received packets in buffer

[hjazz6]

Hi,

I would like to be able to directly access the buffer where packets are stored when they're received. After some googling, I think perhaps libpcap with mmap would be the solution. Does libpcap 1.0 and above support mmap?

From my understanding, mmap would allow me to directly access the buffer without having to explicitly copy the packet to another buffer for me to do processing. I would also appreciate it if someone can let me know where I can find examples of such applications, as many examples of mmap I've found involves mapping a buffer for file operations, rather than integrating it with pcap functions like pcap_loop, pcap_next_ex etc.

Thank you.

Regards,
Rayne

[Rubberman]

You have a lot of studying to do before you go down this path... Network packets are kept (usually) in a circular buffer (linked list). Just using mmap() to map a physical address is not a lot of use here. This is where the pcap functions come in, as they let you navigate that list without much bother.