Re: [tcpdump-workers] [patch] Teach tcpdump to recognize new OpenBSD pflog packets

2007-09-24 Thread Eygene Ryabinkin
Guy, good day. Mon, Sep 24, 2007 at 02:24:34PM -0700, Guy Harris wrote: > On Sep 24, 2007, at 11:25 AM, Eygene Ryabinkin wrote: > > >OpenBSD 4.1 introduced an incompatible change to their pflog device > >packet header: > > ...and didn't introduce a new DLT_ value. Exactly. > It appears that Fr

Re: [tcpdump-workers] [PATCH] add support for bluetooth DLT to tcpdump

2007-09-24 Thread Guy Harris
On Sep 24, 2007, at 1:15 AM, Paolo Abeni wrote: The attached patch is my first attempt to add support to tcpdump for a 'new' DLT (exists in libpcap head, but is currently unknown to tcpdump). It print some basic information (hci frame direction) regarding bluetooth capture. Checked into the m

Re: [tcpdump-workers] Compilation Error - C2894: templates cannot be declared to have 'C' linkage

2007-09-24 Thread Guy Harris
On Sep 22, 2007, at 12:37 AM, Varuna De Silva wrote: This is the program pcap-xxx.c which includes in it xxx_open_live() in it. That's not a "program" in the sense of an executable program; it's something you're adding to libpcap, so it's allowed to include pcap- int.h. I've checked in

Re: [tcpdump-workers] [patch] Teach tcpdump to recognize new OpenBSD pflog packets

2007-09-24 Thread Guy Harris
On Sep 24, 2007, at 11:25 AM, Eygene Ryabinkin wrote: OpenBSD 4.1 introduced an incompatible change to their pflog device packet header: ...and didn't introduce a new DLT_ value. It appears that FreeBSD will be doing the same for 7.0, so we just gave up and said "no pflog dissection except

Re: [tcpdump-workers] What is meant by the callback function

2007-09-24 Thread Guy Harris
On Sep 23, 2007, at 9:08 PM, Varuna De Silva wrote: On 9/23/07, Guy Harris <[EMAIL PROTECTED]> wrote: If you're modifying libpcap to support a new type of capture, you don't write the callback function, I am doing this for my device to be supported by wireshark. As I understand I dont

[tcpdump-workers] [patch] Teach tcpdump to recognize new OpenBSD pflog packets

2007-09-24 Thread Eygene Ryabinkin
Good day. OpenBSD 4.1 introduced an incompatible change to their pflog device packet header: some fields were stuffed into the 'struct pfloghdr' between 'subrulenr' and 'dir': http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_pflog.h.diff?r1=1.11&r2=1.12 This broke tcpdump's ability to di

Re: [tcpdump-workers]

2007-09-24 Thread Harley Stenzel
On 9/24/07, Amine Mustapha Smaali <[EMAIL PROTECTED]> wrote: > Hi Harley, > > I'm trying to use internal stack functions. I found that the function > netisr_queue() is delivering packets to IP layer. When I'm calling this > function in my C program the compiler does not know this function even I >

Re: [tcpdump-workers] What is meant by the callback function

2007-09-24 Thread Varuna De Silva
On 9/23/07, Guy Harris <[EMAIL PROTECTED]> wrote: > > Varuna De Silva wrote: > > Yes, the callback function is in the higher-layer software that uses > libpcap/WinPcap. tcpdump, for example, has two callback functions that > write raw packet data to a capture file and one callback function that >

Re: [tcpdump-workers] Compilation Error - C2894: templates cannot be declared to have 'C' linkage

2007-09-24 Thread Varuna De Silva
Hi, This is the program pcap-xxx.c which includes in it xxx_open_live() in it. and in this program, xxx_read(), we need this include file. We used it since it is the header file in which it has, pcap structure defined. We did this after, pcap-septel.c which also has this include file. thanks Xa

Re: [tcpdump-workers]

2007-09-24 Thread Amine Mustapha Smaali
Hi Harley, I'm trying to use internal stack functions. I found that the function netisr_queue() is delivering packets to IP layer. When I'm calling this function in my C program the compiler does not know this function even I include netisr.h. It seems that it needs the library to be included duri

Re: [tcpdump-workers]

2007-09-24 Thread Harley Stenzel
On 9/24/07, Amine Mustapha Smaali <[EMAIL PROTECTED]> wrote: > Hi All, > > I'm a new member in this maling list and I'm pleased to join this list. > > So, I have one question concerning the libpcap. I wrote a C code to wait for > specific ethernet frames. The frames received contains TCP/IP packets

[tcpdump-workers]

2007-09-24 Thread Amine Mustapha Smaali
Hi All, I'm a new member in this maling list and I'm pleased to join this list. So, I have one question concerning the libpcap. I wrote a C code to wait for specific ethernet frames. The frames received contains TCP/IP packets encapsulated in ESP packets. Those packets are destinated to the machi

[tcpdump-workers] [PATCH] add support for bluetooth DLT to tcpdump

2007-09-24 Thread Paolo Abeni
hello, The attached patch is my first attempt to add support to tcpdump for a 'new' DLT (exists in libpcap head, but is currently unknown to tcpdump). It print some basic information (hci frame direction) regarding bluetooth capture. Any comments are very welcome! cheers, Paolo ---