[tcpdump-workers] User-space bridge on Solaris?

2008-09-19 Thread Ben Greear
I noticed that pcap_setdirection doesn't appear to work on Solaris. Anyone know if it would be possible to get this functionality implemented? Without this, it is very difficult (and not efficient even if possible) to write software to bridge two interfaces in Solaris. Thanks, Ben -- Ben Gre

Re: [tcpdump-workers] protochain, BPF_JA, and sk_chk_filter

2008-09-19 Thread Jefferson Ogata
On 2008-09-19 07:48, Guy Harris wrote: > and 1) has no clue whether the program is being generated for the kernel > or userland and 2) takes raw generated code, not a filter expression > from which to generate code, as an argument, so there's no place to > *tell* it what kind of code to generate.

Re: [tcpdump-workers] dump file parsing with C++

2008-09-19 Thread Guy Harris
On Sep 18, 2008, at 3:23 PM, arun chhetri wrote: Can, you guys please tell me how to parse a tcpdump dump file with C+ +. Use libpcap to read packets from the dump file. That will give you the raw contents of the packets. Parsing the raw packet data is left as an exercise to the reader.

Re: [tcpdump-workers] protochain, BPF_JA, and sk_chk_filter

2008-09-19 Thread Guy Harris
On Sep 18, 2008, at 8:23 PM, Robert Edmonds wrote: right, but the LSF filter validation code treats it as unsigned. Doesn't matter - whether the problem is that the branch goes too far forward, or goes backward, it's not something the kernel can accept (and we're talking about a 1-sphere

Re: [tcpdump-workers] protochain, BPF_JA, and sk_chk_filter

2008-09-19 Thread Robert Edmonds
On 2008-09-18, Guy Harris <[EMAIL PROTECTED]> wrote: > > On Sep 17, 2008, at 2:26 PM, Robert Edmonds wrote: > >> the comparison succeeds because the large unsigned k-value for this >> instruction (0xfff0) is much larger than the number of remaining >> bpf >> instructions (flen-pc-1). > > It's

[tcpdump-workers] dump file parsing with C++

2008-09-19 Thread arun chhetri
Hi, Can, you guys please tell me how to parse a tcpdump dump file with C++. Thanks Arun - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.