Re: [tcpdump-workers] Libpcap snmp messages?

2007-03-21 Thread Guy Harris
On Mar 21, 2007, at 6:07 PM, Greg Hellings wrote: In my experience libpcap lacks an application-layer parser. Correct. Parsing the packet at all is left up to the program using libpcap or the library processing the packets that libpcap generates, as different applications have different

Re: [tcpdump-workers] Libpcap snmp messages?

2007-03-21 Thread Greg Hellings
In my experience libpcap lacks an application-layer parser. You'd have to get the packet content yourself and then parse the contents of it, I believe, to determine that information. On 3/21/07, Nick De Cristofaro <[EMAIL PROTECTED]> wrote: Anyone knows how to extract snmp messages by using the

[tcpdump-workers] Libpcap snmp messages?

2007-03-21 Thread Nick De Cristofaro
Anyone knows how to extract snmp messages by using the libpcap library? Such as the version and the command sent? Nick - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Anonymizing tcpdump

2007-03-21 Thread Aaron Turner
On 3/21/07, Guy Harris <[EMAIL PROTECTED]> wrote: On Mar 21, 2007, at 2:26 PM, Greg Hellings wrote: > and the standard libpcap dump methods for output to files. > Thus, it would seem that development of anonymizing methods would be > best placed within libpcap and also made accessible to clients

Re: [tcpdump-workers] Anonymizing tcpdump

2007-03-21 Thread Guy Harris
On Mar 21, 2007, at 2:26 PM, Greg Hellings wrote: While stumbling through the tcpdump code it looks to me like tcpdump uses its own methods (in the print-*.c files) for displaying output to the screen, Yes. That is as intended. libpcap is a library for capturing and sending traffic, and r

[tcpdump-workers] Anonymizing tcpdump

2007-03-21 Thread Greg Hellings
Greetings, I'm a graduate student at the University of Texas at Dallas and I'm working with some professors here at the University as well as some other researchers from other institutions. We are looking at ways to modify tcpdump so that it will anonymize the data that it collects in different