Re: [tcpdump-workers] help needed for sniffer in c++

akshar SNIFFER wrote: I am writing a sniffer in C++ , Then this is a question that belongs in the tcpdump-workers list, not the ethereal-dev list, so I'm redirecting it there. I have included the pcap.h header file .While compiling i get the following error /**

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

-BEGIN PGP SIGNED MESSAGE- > "Michael" == Michael Mueller <[EMAIL PROTECTED]> writes: Michael> Are you sure you tested 3des-cbc with hmac-md5 or with some Michael> other authentication algorithm? I don't doubt that for some Michael> other authentication algorithms where au

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

Michael, Are you sure you tested 3des-cbc with hmac-md5 or with some other authentication algorithm? I don't doubt that for some other authentication algorithms where authlen is set correctly your code works fine. For *-cbc algorithms the problem seems to be that decryption starts at the end o

Re: [tcpdump-workers] tcpdump with Linux 2.6 and ipsec/ESP

Michael Richardson wrote: -BEGIN PGP SIGNED MESSAGE- "Michael" == Michael Mueller <[EMAIL PROTECTED]> writes: Michael> Is this a Linux or tcpdump / libpcap problem? Does anybody Michael> have some further details about it? Is there a more Michael> appropriate Linux list to send

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

-BEGIN PGP SIGNED MESSAGE- > "Guy" == Guy Harris <[EMAIL PROTECTED]> writes: >> Are there any positive or negative reactions to this? Will >> somebody fix it? Guy> I'd check in the patch if somebody resolved the issue Guy> either by saying that 12 is the right authle

Re: [tcpdump-workers] tcpdump with Linux 2.6 and ipsec/ESP

-BEGIN PGP SIGNED MESSAGE- > "Michael" == Michael Mueller <[EMAIL PROTECTED]> writes: Michael> Is this a Linux or tcpdump / libpcap problem? Does anybody Michael> have some further details about it? Is there a more Michael> appropriate Linux list to send this question to?

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

authlen depends on the authentication algorithm used by esp. But on the command line we only have the encryption algorithm. Unfortunately the decryption at least for the *-cbc algorithms fails completely if authlen is wrong. The two algorithms can be chosen independently of each other in princi

[tcpdump-workers] Automatic report from sources (tcpdump libpcap htdocs) between 04.10.2004 - 05.10.2004 GMT

CVS log entries from 04.10.2004 (Mon) 09:06:35 - 05.10.2004 (Tue) 09:06:35 GMT = Summary by authors = Author: guy File: libpcap/pcap-bpf.c; Revisions: 1.80 ==

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

Michael Mueller wrote: Are there any positive or negative reactions to this? Will somebody fix it? I'd check in the patch if somebody resolved the issue Tcpdump -E doesn't work for 3des-cbc encryption with hmac-md5 authentication (tested with tcpdump-2004.09.22 on Linux 2.6). The reason is that i

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

Hi, Are there any positive or negative reactions to this? Will somebody fix it? Michael Michael Mueller wrote: Sorry, I forgot to append the patch. Tcpdump -E doesn't work for 3des-cbc encryption with hmac-md5 authentication (tested with tcpdump-2004.09.22 on Linux 2.6). The reason is that in es

[tcpdump-workers] tcpdump with Linux 2.6 and ipsec/ESP

Hi, On Linux 2.6 Intel with a ipsec connection in tunnel mode I found that tcpdump shows incoming and outgoing ESP packets as expected. It also shows the incoming packets after they are decrypted (starting from behind the ESP header). But it does not show outgoing unencrypted packets which is a