<Pine.NEB.4.33.0208071015540.2165-100000@vespasia.home-net.internetconnect.net>
References:
	<Pine.NEB.4.33.0208071015540.2165-100000@vespasia.home-net.internetconnect.net>
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii

> So if I understand your code right, (ic->ic_rawbpf) is a necessary but not
> sufficient condition to hand the packet off to bpf_mtap. The bpf system
> would have had to ask for that packet type too. So something like:
> if ((ic->ic_rawbpf) && (ic->ic_raw_bpfcount))
> 	bpf_mtap(ic->ic_rawbpf, m0);

Please note that this interface is very similar to existing bpf hook.
So the value of ic->ic_rawbpf remains NULL unless someone issues BPFSETIF
and BIOCSDLT, and recovered to NULL when the bpf listener closes bpf.
The number of opening listeners are counted in bpf itself.

Atsushi Onoe