Re: [tcpdump-workers] Question on application identification

2005-04-30 Thread Guy Harris
Siva Ramagopal wrote: I'm interested in knowing how tcpdump identifies the application or service to which a packet belongs to. Is the /etc/services file used in this operation or is there a list of mappings between well-known ports to their corresponding applications that is used instead? "iden

[tcpdump-workers] Question on application identification

2005-04-30 Thread Siva Ramagopal
Hi, I'm interested in knowing how tcpdump identifies the application or service to which a packet belongs to. Is the /etc/services file used in this operation or is there a list of mappings between well-known ports to their corresponding applications that is used instead? Also, I'm interested i

[tcpdump-workers] streamlined direction patch for libpcap

2005-04-30 Thread Pawel Pokrywka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I need to specify packet direction for my sniffing application, but current libpcap doesn't offer this functionality. I've found a patch[1], which adds ability to set direction of packet capture. The patch works good, but it modifies pcap_pkthdr