Re: [tcpdump-workers] patch to allow tcpslice to work with zero and

2009-03-30 Thread Sam Roberts
On Wed, Mar 25, 2009 at 7:26 PM, Michael Richardson wrote: > > Yes, we do take patches for tcpslice. > > Sam, please send GPG signed SSH key, and we can move the CVS into git... > The CVS isn't gone, it's just not primary. Here you go. Do the patches look ok? They work well for us. -BEGIN

[tcpdump-workers] this is NOT your typical "Operation not permitted" question

2009-03-30 Thread Andres Gonzalez
Hi, I have 2 applications linked with the same libpcap library. The first one is just a sanity app that makes a few calls to libpcap, including pcap_lookupdevs(). The second app is a bit more extensive but also calls pcap_lookupdevs() upon initialization. If I run the 1st app with user myse

Re: [tcpdump-workers] libpcap linux direction

2009-03-30 Thread Aaron Turner
On Sat, Mar 28, 2009 at 3:46 AM, David H. Lynch Jr. wrote: > Thanks; >    How does one use pcap to transmit to both the net and the local host ? >    This seems to work with winpcap in colinux. I'm not aware of any way to do that with libpcap. -- Aaron Turner http://synfin.net/ http://tcpreplay

Re: [tcpdump-workers] Extra DLT types required for opensolaris DLPI DL

2009-03-30 Thread Darren Reed
Sebastien Roy wrote: ... It might also be simplest for BPF to hook into the ipnet driver anyway, as the driver implements all kinds of heuristics to ensure that the observer doesn't see packets that shouldn't be seen (as related to zones). Some code sharing would be beneficial, and the header co

Re: [tcpdump-workers] Extra DLT types required for opensolaris DLPI DL

2009-03-30 Thread Sebastien Roy
On Sun, 2009-03-29 at 23:11 -0700, Guy Harris wrote: > On Mar 29, 2009, at 10:59 PM, Darren Reed wrote: > > > What I am considering is: > > And what Sebastien is suggesting is, I think: > > using the DL_IPNET link-layer header for loopback devices, as > documented in the loopback device

Re: [tcpdump-workers] Extra DLT types required for opensolaris DLPI DL

2009-03-30 Thread Sebastien Roy
On Sun, 2009-03-29 at 22:59 -0700, Darren Reed wrote: > On 27/03/09 07:01 PM, Sebastien Roy wrote: > > There is already a datalink type associated with loopback (/dev/lo0), > > DL_IPNET, and the header is described in the lo0(7D) man page. It's > > versioned, so it would be technically possible t

Re: [tcpdump-workers] Extra DLT types required for opensolaris DLPI DL

2009-03-30 Thread Alexander Dupuy
Guy Harris wrote: Arguably, a library for writing link-layer protocols in userland, separate from libpcap, would be useful. For example: on a number of platforms, the former library would bind to the low-level networking stack with a particular SAP rather than "promiscuously" for all SAP