pcap_setfilter(3pcap) — Linux manual page


PCAP_SETFILTER(3PCAP)                              PCAP_SETFILTER(3PCAP)

NAME         top

       pcap_setfilter - set the filter

SYNOPSIS         top

       #include <pcap/pcap.h>

       int pcap_setfilter(pcap_t *p, struct bpf_program *fp);

DESCRIPTION         top

       pcap_setfilter() is used to specify a filter program.  fp is a
       pointer to a bpf_program struct, usually the result of a call to

RETURN VALUE         top

       pcap_setfilter() returns 0 on success, PCAP_ERROR_NOT_ACTIVATED
       if called on a capture handle that has been created but not
       activated, or PCAP_ERROR on other errors.  If PCAP_ERROR is
       returned, pcap_geterr(3PCAP) or pcap_perror(3PCAP) may be called
       with p as an argument to fetch or display the error text.

SEE ALSO         top


COLOPHON         top

       This page is part of the libpcap (packet capture library)
       project.  Information about the project can be found at 
       ⟨http://www.tcpdump.org/⟩.  If you have a bug report for this
       manual page, see ⟨http://www.tcpdump.org/#patches⟩.  This page
       was obtained from the project's upstream Git repository
       ⟨https://github.com/the-tcpdump-group/libpcap.git⟩ on 2022-12-17.
       (At that time, the date of the most recent commit that was found
       in the repository was 2022-12-13.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to

                              5 March 2022         PCAP_SETFILTER(3PCAP)