Hi Jean-Louis, I'm currently using the patched version of tcpdump/libpcap to
capture traffic, and Wireshark to dissect/view it. I do intend to do
capturing with Wireshark though, when I've got round to recompiling it
against the new libpcap.
Thanks.
On Thu, Oct 30, 2008 at 6:18 PM, Jean-Louis <[EM
Jean-Louis ha scritto:
Tyson Key ha scritto:
Hi Jean-Louis, just applied the patches and it compiles and installs
successfully.
Still looks like certain packets are being truncated (mostly
URB_ISOCHRONOUS
ones from what I can tell).
Thanks.
now also the mmap mode have snaplen limitation...
Tyson Key ha scritto:
Hi Jean-Louis, just applied the patches and it compiles and installs
successfully.
Still looks like certain packets are being truncated (mostly URB_ISOCHRONOUS
ones from what I can tell).
Thanks.
now also the mmap mode have snaplen limitation...
try to capture traffic wi
Hi Jean-Louis, just applied the patches and it compiles and installs
successfully.
Still looks like certain packets are being truncated (mostly URB_ISOCHRONOUS
ones from what I can tell).
Thanks.
On Thu, Oct 30, 2008 at 4:33 PM, Jean-Louis <[EMAIL PROTECTED]> wrote:
> Tyson Key ha scritto:
>
>> H
Hi again, Guy. I've just been doing some strace-ing, and it appears to doing
a "open("/dev/usbmon2", O_RDONLY|O_LARGEFILE) = 3". Not sure if the script
log will be of use to you, although I'll attach it anyway.
Going to try the printf() kludge soon.
Tyson.
On Thu, Oct 30, 2008 at 12:27 AM, Guy Ha
Tyson Key ha scritto:
Hi Jean-Louis, does libpcap compile with the supplied patch for you?
It applied cleanly here, although I can't complete the ./configure phase
(the error produced is below):
./pcap-usb-linux.c: In function 'usb_read_linux_mmap':
./pcap-usb-linux.c:708: error: 'clen' undeclare
Hi Jean-Louis, does libpcap compile with the supplied patch for you?
It applied cleanly here, although I can't complete the ./configure phase
(the error produced is below):
./pcap-usb-linux.c: In function 'usb_read_linux_mmap':
./pcap-usb-linux.c:708: error: 'clen' undeclared (first use in this
fun
Bad form to reply to my own mail, I know, although the output of "tcpdump
-V" is as follows if it helps:
tcpdump version 3.9-PRE-CVS_2008_10_27
libpcap version 0.9-PRE-CVS
Thanks.
On Thu, Oct 30, 2008 at 12:33 PM, Tyson Key <[EMAIL PROTECTED]> wrote:
> Hi again, Guy. I've just been doing some st
Jean-Louis ha scritto:
Jean-Louis ha scritto:
today I have found some bug on pcap-usb-linux.c
now i can try to tell you which are
in accordance with usbmon.txt in "mmap mode" the data is at
&mmap_area[vec[i]] + 64;
rather than
&mmap_area[vec[i]] + 48;
with mmap ther'is 16Byte filled with
