Re: [tcpdump-workers] SCO libpcap

2008-06-12 Thread sufei7099
after replacing, the result is: # make /bin/ksh ./libtool --mode=compile cc -DHAVE_CONFIG_H -D_U_="" -I. -I/usr/local/include-g -belf -c fad-gifc.c cc -DHAVE_CONFIG_H -D_U_= -I. -I/usr/local/include -g -belf -c fad-gifc.c -o fad-gifc.o "/usr/include/sys/file.h", line 61: error: Syn

Re: [tcpdump-workers] about this mailing list

2008-06-12 Thread Guy Harris
On Jun 12, 2008, at 2:56 PM, Eloy Paris wrote: However, other applications may want to do more than capturing, dissecting, and presenting results, like capturing packets and then taking some action, like sending a response back, or performing some type of analysis that tcpdump and wireshark can

Re: [tcpdump-workers] about this mailing list

2008-06-12 Thread Eloy Paris
On Wed, Jun 11, 2008 at 08:04:28PM -0700, Michael Bernstein wrote: > Thanks Guy. That response was excellent. Please excuse my naivety. > > Obviously, you know the deep down of how this program works and the > why. Why do people want to develop programs based on libpcap when > TCPdump and Wireshar

Re: [tcpdump-workers] about this mailing list

2008-06-12 Thread Michael Bernstein
Thanks Guy. That response was excellent. Please excuse my naivety. Obviously, you know the deep down of how this program works and the why. Why do people want to develop programs based on libpcap when TCPdump and Wireshark exist. What is the benefit? Thanks. Michael CCIE Security #16395 --- On

[tcpdump-workers] tcpdump not parsing snmp over tcp packets

2008-06-12 Thread mike johnson
Hello, Is tcpdump supposed to be able to parse snmp packets that are sent over tcp. It correctly parses the packets when they are sent over udp, but not over tcp. Is there a way to make it do this? Thanks _ Instantly invite fri

Re: [tcpdump-workers] SCO libpcap

2008-06-12 Thread Guy Harris
sufei7099 wrote: It's print nothing. I suspected it would. Are you running OpenServer 5, OpenServer 6, That means that the code in libpcap's pcap-dlpi.c probably can't easily be made to work on OpenServer 5. About the only thing I can suggest is to try replacing the #include f