Re: [tcpdump-workers] pcap_inject() fails with rc 0 on HP-UX

2006-04-03 Thread Guy Harris
Harley Stenzel wrote: However, on HP-UX, that same call returns rc 0. I was not able to find a pre-existing bug for this problem, however I was able to find this message: http://www.tcpdump.org/lists/workers/2004/03/msg00103.html indicating that at least in 2004, HP-UX send would not work

Re: [tcpdump-workers] pcap_inject() fails with rc 0 on HP-UX

2006-04-03 Thread Rick Jones
WRT the return of zero as the number of bytes - perhaps some of the code in pcap_dpli is ass-u-me-ing the return value from a call will give that? I've not looked at that source in a very long time though... 4) What is the expected interaction of multiple libpcap instances on HP-UX? I can't

[tcpdump-workers] pcap_inject() fails with rc 0 on HP-UX

2006-04-03 Thread Harley Stenzel
Greetings-- [ obligatory new content because I messed up the content the first time around. ] I opened a bug report on sourceforge about this, but now have some additional observations, and I would like some guidance about how to best further debug the problem. I've included that bug report here

Re: [tcpdump-workers] A broken filter...

2006-04-03 Thread Dan Joumaa
Hannes Gredler wrote: Dan Joumaa wrote: Hello, I am trying to capture all ethernet packets with the source host's first 3 octets being 00, 09, and bf. It was suggested that I used this filter: "ether[0] == 0x00 && ether[1] == 0x09 && ether[2] == 0xbf." When packets are sent that should ma

[tcpdump-workers] timestamps

2006-04-03 Thread Debrei Gabor
Hello! Has anybody written an application using PCAP, which places a timestamp into the payload? I want to measure the latency between the application layer and the sending buffer. (so ethereal measures the other, using the same kernel clock and in FreeBSD the driver timestamps at the sending

Re: [tcpdump-workers] Changing the savefiles produces packet loss

2006-04-03 Thread David Rosal
David Rosal wrote: Hello. I've been capturing heavy traffic with tcpdump. No packets are dropped except when the savefiles are rotated. I know that because I use a modified version of tcpdump-3.9.4 that prints statistics every minute. My question is, is it normal to loose packets when closi

[tcpdump-workers] Changing the savefiles produces packet loss

2006-04-03 Thread David Rosal
Hello. I've been capturing heavy traffic with tcpdump. No packets are dropped except when the savefiles are rotated. I know that because I use a modified version of tcpdump-3.9.4 that prints statistics every minute. My question is, is it normal to loose packets when closing and opening the s