How to use the "pcap_lookupdev()" in libpcap?

c linux libpcap
why picture why · Sep 19, 2010 · Viewed 9k times · Source

The code cant find any device, I want to know what does pcap_lookupdev() do ? thanks

#include <pcap.h>
int main(int argc, char *argv[])
{
    pcap_t *handle;

    char *dev;// = "eth0";
    char errbuf[PCAP_ERRBUF_SIZE];
    dev = pcap_lookupdev(errbuf);
    if (dev == NULL) {
        fprintf(stderr, "Couldn't find default device: %s\n", errbuf);
        return(2);
    }
    printf("Device: %s\n", dev);
    return(0);

    handle = pcap_open_live(dev, BUFSIZ, 1, 1000, errbuf);
    if (handle == NULL) {
        fprintf(stderr, "Couldn't open device %s: %s\n", dev, errbuf);
        return(2);
    }


}

Answer

nos picture nos · Sep 19, 2010

pcap_lookupdev seems to just return the first device it can find(if any) except the loopback device.

Do you run this as root ? Normal users won't be allowed to open or inspect these devices.

Personally I find pcap_lookupdev rather useless as you don't really have control over what device it gives you.

Related questions

Problems finding pcap.h and linking

I'm working on Fedora 17 and I want to program with libpcap. The problem is that my computer isn't finding pcap.h, which is really wierd since I've installed libpcap and libpcap-devel. Also wireshark and snort works on my station which …

Read More
Creating a pcap file

I need to save UDP packets to a file and would like to use the pcap format to reuse the various tools available (wireshark, tcpdump, ...). There are some information in this thread but I can't find how to write the …

Read More
Pcap functions have "undefined reference"

I'm trying to go through this tutorial: http://www.tcpdump.org/pcap.html Now I have install pcap (code hints and all that is working) using : sudo apt-get install libpcap-dev and so far I have the following code (file name …

Read More