PCAP_SETFILTER(3)

💖 NAME 💖

okay so bestie, welcome to PCAP_SETFILTER(3) from the Library Functions Manual — the whole vibe is literally just set the filter. That’s it. That’s the name. 💅

✨ SYNOPSIS ✨

#include <pcap/pcap.h>

int pcap_setfilter(pcap_t *p, struct bpf_program *fp);

🦋 DESCRIPTION 🦋

pcap_setfilter() is the function you use to specify a filter program. The fp argument is a pointer to a bpf_program struct, and it’s usually the result of calling pcap_compile(3). iykyk 🫶

🎀 RETURN VALUE 🎀

pcap_setfilter() returns 0 on success — slay ✨.

It returns PCAP_ERROR_NOT_ACTIVATED if you call it on a capture handle that has been created but not activated. Like, the handle is not ready yet, bestie, no cap.

Or it returns PCAP_ERROR on other errors. If PCAP_ERROR gets returned, you can call pcap_geterr(3) or pcap_perror(3) with p as an argument to fetch or display the error text. Very demure, very helpful. 💖

🌈 SEE ALSO 🌈

• pcap(3)

kisses bestie, that’s the PCAP_SETFILTER(3) page from the Library Functions Manual, dated 5 March 2022 🎀💜