[tcpdump-workers] pcap_findalldevs() failing on FreeBSD 7.2

2009-09-24 Thread Aaron Turner
I've got a user of tcpreplay having issues where his interfaces are not being returned via pcap_findalldevs() under FreeBSD 7.2 using libpcap 0.9.7. I don't have much more information unfortunately, but I do know he has an "nVIDIA nForce 10/100/1000 Ethernet" NIC as well as the obvious loopback.

Re: [tcpdump-workers] How does packet capture interact with

2009-09-24 Thread Aaron Turner
On Thu, Sep 24, 2009 at 12:40 PM, Robert Burgess wrote: >> As long as the destination IP address of the packets are not of the >> firewall then you shouldn't need a host-based firewall to drop the >> packets. > > It still has to drop them, though---I think---because I don't want the > packets forw

Re: [tcpdump-workers] How does packet capture interact with

2009-09-24 Thread Robert Burgess
> As long as the destination IP address of the packets are not of the > firewall then you shouldn't need a host-based firewall to drop the > packets. It still has to drop them, though---I think---because I don't want the packets forwarded on until I say so. > Also, I forgot to mention that on som

[tcpdump-workers] enquire about isc.util.pcap.javacap

2009-09-24 Thread wangshangbo.best
hello, I want to use your javacap class to measure the timestamp, at which the packet is captured, in nanoseconds. Can I get this package from you? Thank you Best Regards - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] How does packet capture interact with

2009-09-24 Thread Aaron Turner
On Thu, Sep 24, 2009 at 7:04 AM, Robert Burgess wrote: >> you somehow have to make sure that the kernel doesn't deal with packets >> you want to take care of. If you don't, it will reset TCP connections >> and reply with ICMP port unreachable messages to UDP datagrams etc. > > Yes, that is a probl

[tcpdump-workers] BPF now integrated into SunOS 5

2009-09-24 Thread Darren Reed
After around 17 years of being out in the cold, BPF is now integrated into the SunOS kernel. At long last it is no longer necessary to use binary patches on a SunOS kernel or do the filtering in userland. BPF can be found in Solaris Express Community Edition build 125 onwards and in upcoming relea

Re: [tcpdump-workers] How does packet capture interact with

2009-09-24 Thread Robert Burgess
> you somehow have to make sure that the kernel doesn't deal with packets > you want to take care of. If you don't, it will reset TCP connections > and reply with ICMP port unreachable messages to UDP datagrams etc. Yes, that is a problem; I was handling it by having the OS firewall (whatever it i

Re: [tcpdump-workers] How does packet capture interact with

2009-09-24 Thread Robert Burgess
> Doesn't sound like you have your requirements fully flushed out, but > you might want to take a look at the tcpbridge code which is part of > tcpreplay. It basically does most of what you need: Thanks! I will have a look at that, especially the MAC learning part. Robert. - This is the tcpdump

Re: [tcpdump-workers] How does packet capture interact with

2009-09-24 Thread Tillmann Werner
Hi Robert, you somehow have to make sure that the kernel doesn't deal with packets you want to take care of. If you don't, it will reset TCP connections and reply with ICMP port unreachable messages to UDP datagrams etc. I don't think there is a portable way to do this. Linux supports hooking its