From: Eric Hodel <drbrain@...7.net>
Date: 2007-11-17T12:26:13+09:00
Subject: Re: ruby/pcap with threads

On Nov 16, 2007, at 07:55 , kenny roytman wrote:
> wierd, i'm not seeing this behavior.  I'm running on Mac OS X.  I
> wonder if that's a problem ...

I had to go with a fork model for OS X, something in pcap doesn't  
allow switching threads.

See Capture#run for a stupid-simple way of doing this:

http://segment7.net/projects/ruby/snippets/httpdump.rb

If you need better communication, instead of parsing #inspect output,  
use Marshal.dump and Marshal.load.

--
Poor workers blame their tools. Good workers build better tools. The
best workers get their tools to do the work for them. -- Syndicate Wars