Re: [tcpdump-workers] When will a packet filter be ignored/unused?

2010-03-16 Thread Michael Richardson
> "Jim" == Jim Lloyd writes: Jim> I imagine it might be driver specific, and now I see that the Jim> ethernet interfaces on the servers I have available for testing Jim> have a more diverse set of drivers than I was aware. Using Jim> ethtool and checking a few different interf

Re: [tcpdump-workers] New DLT type.

2010-03-16 Thread Michael Richardson
> "Jon" == Jon Meyer writes: Jon> What type of information do I need to supply in order to have a Jon> new DLT type assigned? 1) who you are, and where your data encoding definition is kept, or a C header file. (i.e a URL to a document) Or if it's "proprietary", then a reason

Re: [tcpdump-workers] When will a packet filter be ignored/unused?

2010-03-16 Thread Darren Reed
On 16/03/10 04:40 PM, Jim Lloyd wrote: I have a working application using libpcap that doesn't always filter as I expect. The application is designed to sniff http traffic, so the filter can be as simple as "tcp port 80". However, we allow sniffing multiple http servers running on different ports

[tcpdump-workers] When will a packet filter be ignored/unused?

2010-03-16 Thread Jim Lloyd
I have a working application using libpcap that doesn't always filter as I expect. The application is designed to sniff http traffic, so the filter can be as simple as "tcp port 80". However, we allow sniffing multiple http servers running on different ports, so it is common to use a filter like "t

Re: [tcpdump-workers] New DLT type.

2010-03-16 Thread Guy Harris
On Mar 16, 2010, at 7:34 AM, jon_me...@selinc.com wrote: > What type of information do I need to supply in order to have a new DLT > type assigned? A description of the format of the header at the beginning of the packet (so that we can say "this DLT type is for a header that looks like this;

[tcpdump-workers] New DLT type.

2010-03-16 Thread Jon_Meyer
What type of information do I need to supply in order to have a new DLT type assigned? Thanks, Jon Jon W. Meyer Schweitzer Engineering Laboratories Marketing, Research & Development Automation & Integration Engineering Lead Software Engineer jon_me...@selinc.com 509-332-1890 Ext 1773 - This is