Hi
I'm reading about the libpcap documentation. I see that with the function:
pcap_setfilter ( pcap_t *p, struct bpf_program *fp)
we can choose to take one packet instead another.
I read that the struct bpf_program allow us to create a packet filter , ....so if I want just sample some pkts at a given rate, for example I'd like to take 1 packet every 10 (no matter which sourc or dest), have I to set in the right way the struct bpf_program?
Or is there another way?
thx in advance
Dedalus.