Re: [tcpdump-workers] [PATCH] SocketCAN support for libpcap -

2009-10-05 Thread Michael Richardson
> "Gianluca" == Gianluca Varenni writes: >>> different DLT_ value, e.g. DLT_CAN20B_LINUX or >>> DLT_CAN20B_SOCKETCAN or something such as that. >>> >>> Gianluca, what does the header look like in a DLT_CAN20B packet? >> Yes, I agree with you. I searched arround for softwa

Re: [tcpdump-workers] [PATCH] SocketCAN support for libpcap - draft implementation

2009-10-05 Thread Gianluca Varenni
Presumably aligned(8) means "align on an 8-byte boundary"; if canid_t is a 32-bit quantity, then there should be 3 bytes of padding on *all* platforms. However, if you're using DLT_CAN20B, what matters here is what *existing* software that uses DLT_CAN20B expects; you would have to arra

Re: [tcpdump-workers] [PATCH] SocketCAN support for libpcap -

2009-10-05 Thread Gianluca Varenni
different DLT_ value, e.g. DLT_CAN20B_LINUX or DLT_CAN20B_SOCKETCAN or something such as that. Gianluca, what does the header look like in a DLT_CAN20B packet? Yes, I agree with you. I searched arround for software that uses that DLT, but did not find anything... My intention was to avoid to re

Re: [tcpdump-workers] only one flow is been showed

2009-10-05 Thread Guy Harris
On Oct 5, 2009, at 7:44 AM, Marcio Veloso Antunes wrote: I have a strange problem going on... TCPDump is showing only one traffic flow. What other flows are you expecting to see? To be specific it is only showing the traffic that is incoming to the interface from the network. Do you me

[tcpdump-workers] only one flow is been showed

2009-10-05 Thread Marcio Veloso Antunes
Hi, I have a strange problem going on... TCPDump is showing only one traffic flow. To be specific it is only showing the traffic that is incoming to the interface from the network. I've tested with tcpdump 3.9.8 and 4.0.0 and the problem persists. I am using Slackware 12.1 on this machine.

Re: [tcpdump-workers] [PATCH] SocketCAN support for libpcap - draft implementation

2009-10-05 Thread Gianluca Varenni
However, if you're using DLT_CAN20B, what matters here is what *existing* software that uses DLT_CAN20B expects; you would have to arrange to make the frame look like that, regardless of whether it matches "struct can_frame" or not, or you would have to request a different DLT_ value, e.g

Re: [tcpdump-workers] [PATCH] SocketCAN support for libpcap -

2009-10-05 Thread Felix Obenhuber
On Sun, 2009-10-04 at 16:40 -0700, Guy Harris wrote: > (I'm assuming that I can just reply to the third of your three > messages.) ok - I saw the copies in the archive, but dit not receive anything due a positive subscription result. Anyway: Sorry for spamming! Please keep me in CC. > On Oct 4,