PCAP_SNAPSHOT(3)

💅 PCAP_SNAPSHOT(3) 💅

okay so bestie, welcome to the PCAP_SNAPSHOT(3) page from the Library Functions Manual — it's giving “get the snapshot length” energy, and honestly? iconic. ✨

🎀 NAME 🎀

pcap_snapshot - get the snapshot length

✨ SYNOPSIS ✨

#include <pcap/pcap.h>

int pcap_snapshot(pcap_t *p);

💖 DESCRIPTION 💖

pcap_snapshot() returns the snapshot length specified when pcap_set_snaplen(3) or pcap_open_live(3) was called, for a live capture — or the snapshot length from the capture file, for a savefile. lowkey straightforward, fr fr. 🫶

okay but the vibe check here is serious: it must not be called on a pcap descriptor created by pcap_create(3) that has not yet been activated by pcap_activate(3). not me warning you twice. 🚫💅

🌸 RETURN VALUE 🌸

pcap_snapshot() returns the snapshot length on success. and if you call it on a capture handle that has been created but not activated? it returns PCAP_ERROR_NOT_ACTIVATED. 😭 periodt.

🦋 SEE ALSO 🦋

• pcap(3)

xoxo, your Library Functions Manual bestie — PCAP_SNAPSHOT(3), dated 7 April 2014 💖✨