Re: [tcpdump-workers] New libpcap API

2010-01-15 Thread Mark Bednarczyk
Thank you for all your insight. I will bypass the bpf_* functions then from the API. The remainder I will include. Cheers, mark... > -Original Message- > From: tcpdump-workers-ow...@lists.tcpdump.org > [mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of > Guy Harris > Sent: Frid

Re: [tcpdump-workers] New libpcap API

2010-01-15 Thread Guy Harris
On Jan 15, 2010, at 8:17 AM, Mark Bednarczyk wrote: > I'm the developer of a java libpcap wrapper jNetPcap. jNetPcap API > currently provides comparible libpcap functions for almost everything prior > to libpcap 0.9.8 version. I am planning out additional functions that I > think need to be adde

Re: [tcpdump-workers] bpf filtering for new DLT type

2010-01-15 Thread Lidwa, Eric (GSFC-582.0)[SGT INC]
Thank you very much. I am hoping not to touch the grammar/scanner files. Providing filtering for IP inside of AOS frames and then raw filtering on AOS header may be a good compromise. Thanks again, Eric -Original Message- From: tcpdump-workers-ow...@lists.tcpdump.org [mailto:tcpdump-wo

Re: [tcpdump-workers] bpf filtering for new DLT type

2010-01-15 Thread Guy Harris
On Jan 15, 2010, at 8:31 AM, Lidwa, Eric (GSFC-582.0)[SGT INC] wrote: > I am trying to find information on what is needed to implement bpf filtering > for a new DLT type (in my case DLT_AOS). > > Initially I added to gencode.c in libpcap the following: > > case DLT_AOS: >

Re: [tcpdump-workers] Capturing stream protocols

2010-01-15 Thread Guy Harris
On Jan 15, 2010, at 12:30 AM, Justas Poderys wrote: > //Sorry if this is a duplicate It's not a duplicate, the *other* one is. :-) (So it sounds as if your messages were delivered out-of-order.) > What I am doing is a device for capturing data from Common Channel > Signaling link in E1/T1 sys

Re: [tcpdump-workers] New libpcap API

2010-01-15 Thread Darren Reed
Since you're looking for one-liners... On 15/01/2010 9:47 PM, Mark Bednarczyk wrote: bpf_filter- ??? Applies the BPF program (filter) to a packet and returns if the packet should be captured or not. bpf_validate - ??? Verifies that a BPF program is valid and

[tcpdump-workers] bpf filtering for new DLT type

2010-01-15 Thread Lidwa, Eric (GSFC-582.0)[SGT INC]
I am trying to find information on what is needed to implement bpf filtering for a new DLT type (in my case DLT_AOS). Initially I added to gencode.c in libpcap the following: case DLT_AOS: /* * Currently, only raw "link[N:M]" filtering is supporte

[tcpdump-workers] New libpcap API

2010-01-15 Thread Mark Bednarczyk
Hi, I'm the developer of a java libpcap wrapper jNetPcap. jNetPcap API currently provides comparible libpcap functions for almost everything prior to libpcap 0.9.8 version. I am planning out additional functions that I think need to be added to the API. Does anyone know which functions were intr

[tcpdump-workers] Capturing stream protocols

2010-01-15 Thread Justas Poderys
Hi all, Sorry if this is a newbie question, I am just getting used to working with tcpdump. What I am doing is a device for capturing data from Common Channel Signaling link in E1/T1 systems. I can extract each byte from a CCS channel in each frame. <...> Then I can use Wireshark for decoding act

[tcpdump-workers] Capturing stream protocols

2010-01-15 Thread Justas Poderys
//Sorry if this is a duplicate Hi all, Sorry if this is a newbie question, I am just getting used to working with tcpdump. What I am doing is a device for capturing data from Common Channel Signaling link in E1/T1 systems. I can extract each byte from a CCS channel in each frame. <...> Then I ca