Re: [tcpdump-workers] Changing the savefiles produces packet loss

2006-04-04 Thread Guy Harris
(blah blah blah original reply sent from the wrong address blah blah blah text to fool the duplicate message detector blah blah blah blah). On Apr 3, 2006, at 6:20 AM, David Rosal wrote: It would help if that would be any way to close the old file asynchronously, but I guess that pcap_dump_c

Re: [tcpdump-workers] pcap_inject() fails with rc 0 on HP-UX

2006-04-04 Thread Guy Harris
On Apr 4, 2006, at 8:51 AM, Harley Stenzel wrote: On 4/3/06, Rick Jones <[EMAIL PROTECTED]> wrote: I believe this is a long-standing limitation of promiscuous mode support in HP-UX - only one process may have a promiscuous stream open on an interface at one time. I believe that is the cas

Re: [tcpdump-workers] transmitting packets

2006-04-04 Thread Rick Jones
Jan Allman wrote: Rick, I'm tring to see how much data I can send over a point to point Ethernet link using UDP (i.e. as quickly as possible). I had a repeating loop of "sendto" calls. I was using Ethereal to report statistics on the throughput I was achieving. Repeating your test on my mach

Re: [tcpdump-workers] transmitting packets

2006-04-04 Thread Jan Allman
Rick, I'm tring to see how much data I can send over a point to point Ethernet link using UDP (i.e. as quickly as possible). I had a repeating loop of "sendto" calls. I was using Ethereal to report statistics on the throughput I was achieving. Repeating your test on my machines (be

Re: [tcpdump-workers] A broken filter...

2006-04-04 Thread Dan Joumaa
Hannes Gredler wrote: Dan Joumaa wrote: Hello, I am trying to capture all ethernet packets with the source host's first 3 octets being 00, 09, and bf. It was suggested that I used this filter: "ether[0] == 0x00 && ether[1] == 0x09 && ether[2] == 0xbf." When packets are sent that should ma

Re: [tcpdump-workers] pcap_inject() fails with rc 0 on HP-UX

2006-04-04 Thread Harley Stenzel
On 4/3/06, Rick Jones <[EMAIL PROTECTED]> wrote: > > 4) What is the expected interaction of multiple libpcap instances on > > HP-UX? I can't use my program and tcpdump at the same time; something > > I can do on other OSes. > > I believe this is a long-standing limitation of promiscuous mode suppo