Re: [tcpdump-workers] How to make libpcap work in MMAP mode

2006-05-18 Thread Ury Segal
What do you mean by "MMAP mode" ? --- Öì¹úÔÆ <[EMAIL PROTECTED]> wrote: > Hi,everybody: > > I want to know how to make libpcap(version > 0.9.20060417) work in MMAP mode. Would somebody > give me some help? Thanks in advance! > > > - > This is the tcpdump-workers list. > Visit https://l

[tcpdump-workers] How to make libpcap work in MMAP mode

2006-05-18 Thread 朱国云
Hi,everybody: I want to know how to make libpcap(version 0.9.20060417) work in MMAP mode. Would somebody give me some help? Thanks in advance! - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] tcpddump -w help

2006-05-18 Thread Guy Harris
On May 18, 2006, at 9:18 PM, sandeep nitta wrote: can anyone help me out with how a tcpdump -w command works. I want to know what library functions are invoked if i use a -w option and the structures used. It uses: pcap_open_live() to open the capture device; pcap_dump_op

[tcpdump-workers] tcpddump -w help

2006-05-18 Thread sandeep nitta
can anyone help me out with how a tcpdump -w command works. I want to know what library functions are invoked if i use a -w option and the structures used. Thanks sandeep nitta - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Libpcap corrupts output

2006-05-18 Thread Guy Harris
Cove Schneider wrote: Guy Harris wrote: Either 1) the pipe is or other network connection is in non-blocking mode (in which case it *won't* block in that case) or 2) there's a bug in the OS on which you're running this. I believe it's 1 here, the other end of the pipe is handled b

Re: [tcpdump-workers] Filtering based on multiple IP address.

2006-05-18 Thread Hannes Gredler
1. Is there is a limit in the length of filter string afaik 256 BPF instructions 2. What will be the performance impact because of having a huge filter string. linear performance impact 3. Will PCAP automatically reduce the the filter string for performance. not for a chain of explicit h

[tcpdump-workers] Filtering based on multiple IP address.

2006-05-18 Thread C Guy
Hi, I am writing an application that captures all the data in the network and processes only the voice packets. In order to minimize the data that i process, i have provided a capture filter based on the IP address of the voip devices. The filter is like (host 192.168.117.23 || host 192.168.117.3