Re: [tcpdump-workers] [tcpdump] 7 tests fail on Ubuntu 11.10 (#33)

2012-10-09 Thread Denis Ovsienko
05.10.2012, 23:07, "Michael Richardson" :
>>  "Marc" == Marc Abramowitz  writes:
>
> Marc> After I observed 7 tests failing on Travis CI (which uses
> Marc> Ubuntu) in #32, I tried running the tests in an Ubuntu 11.10
> Marc> virtual machine and also got 7 test failures there.
>
> It's likely you do not have libssl-dev installed, so tcpdump is
> configured without the ability to decode ESP (IPsec) packets.
>
> Marc> esp1: failed.  esp2: failed.  esp3: failed.  esp4: failed.

This bug is specific to a 64-bit build. The matter is, $libdir alwayss end in 
"/lib" and this "lib" is later used to locate libcrypto.so (see AC_LBL_SSLEAY). 
This way, an installed openssl-devel is never detected by default on a 64-bit 
system, because the library files are in /usr/lib64. On a 32-bit system 
detection works fine and all tests pass.

To make the configure detect openssl-devel on a 64-bit system it should be run 
this way:

./configure --with-crypto --libdir=/usr/lib64

After that all tests pass.

-- 
Denis Ovsienko
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


[tcpdump-workers] Bug in tcpdump -tt timestamps

2012-10-09 Thread Jim Mellander
Hi:

On tcpdump 4.1.1, printing from a saved standard format pcap file:

$ tcpdump -nn -tt -s 0 -r 128.XX.XX.197.icmp.trace |head -3
reading from file 128.XX.XX.197.icmp.trace, link-type EN10MB (Ethernet)
18:45:55.966123176 IP 128.XX.XX.197 > 78.186.239.143: ICMP host
128.XX.XX.33 unreachable, length 36
18:45:56.266157176 IP 128.XX.XX.197 > 212.152.40.91: ICMP host
128.XX.XX.103 unreachable, length 36
18:45:57.466110176 IP 128.XX.XX.197 > 72.32.167.183: ICMP host
128.XX.XX.115 unreachable, length 36
$


printing again:

$ tcpdump -nn -tt -s 0 -r 128.XX.XX.197.icmp.trace |head -3
reading from file 128.XX.XX.197.icmp.trace, link-type EN10MB (Ethernet)
18:45:55.966123552 IP 128.XX.XX.197 > 78.186.239.143: ICMP host
128.XX.XX.33 unreachable, length 36
18:45:56.266157552 IP 128.XX.XX.197 > 212.152.40.91: ICMP host
128.XX.XX.103 unreachable, length 36
18:45:57.466110552 IP 128.XX.XX.197 > 72.32.167.183: ICMP host
128.XX.XX.115 unreachable, length 36
$


The final 3 digits of the timestamp are bogus and always the same
throughout the run.  Since the timestamps are stored in microsecond
precision, shouldn't the last 3 digits be 0's?

Thanks in advance.
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Re: [tcpdump-workers] Bug in tcpdump -tt timestamps

2012-10-09 Thread sthaug
> The final 3 digits of the timestamp are bogus and always the same
> throughout the run.  Since the timestamps are stored in microsecond
> precision, shouldn't the last 3 digits be 0's?

Which OS are you on? Tried this on FreeBSD 8-STABLE, both 32 and 64
bit. Only 6 digits are printed, not 9 - and thus your problem cannot
be reproduced.

Steinar Haug, Nethelp consulting, sth...@nethelp.no
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers