Re: [tcpdump-workers] 3.9.4 assumes IPv6 enabled

2005-11-12 Thread Guy Harris
Ian McDonald wrote: It uses the in6_addr structure because that would be bigger than IPv4 so could hold both. Saves having two different parts of code doing basically the same thing. ...and breaks builds on systems that don't support IPv6. As noted, a change was checked in to fix this; all it

Re: [tcpdump-workers] 3.9.4 assumes IPv6 enabled

2005-11-12 Thread Guy Harris
Albert Chin wrote: From print-isoclns.c: static int isis_print_extd_ip_reach (const u_int8_t *tptr, const char *ident, u_int16_t afi) { char ident_buffer[20]; u_int8_t prefix[sizeof(struct in6_addr)]; /* shared copy buffer for IPv4 and IPv6 prefixes */ The prefix definition is

Re: [tcpdump-workers] more advanced feature of libpcap?

2005-11-12 Thread Guy Harris
Vossie wrote: This was the feature I wanted to implement. I would just mention in my report that this kind of detection is not practical. Direct *detection* isn't possible except at the point of packet loss (although you might be able to get packet loss counts from the switch or router), but

Re: [tcpdump-workers] libpcap and a proxy server

2005-11-12 Thread Guy Harris
Vossie wrote: The University of Pretoria uses a firewall to limit access to the Internet but also a proxy server (for the students). According to someone I have spoken about my problem the proxy server also uses the firewall for outside access but it is a kind of a router for the students. Thus