Re: [tcpdump-workers] vlan tagged packets and libpcap breakage

2012-12-11 Thread Ani Sinha
On Tue, Dec 11, 2012 at 3:04 PM, Eric Dumazet wrote: > On Tue, 2012-12-11 at 14:36 -0800, Ani Sinha wrote: >> > >> > It is possible to test for the presence of support of the new vlan bpf > If you want to test ANCILLARY possible values, its already too late, as > old kernels wont use any patch an

Re: [tcpdump-workers] vlan tagged packets and libpcap breakage

2012-12-11 Thread Ani Sinha
On Tue, Dec 11, 2012 at 3:04 PM, Eric Dumazet wrote: > On Tue, 2012-12-11 at 14:36 -0800, Ani Sinha wrote: >> > >> > It is possible to test for the presence of support of the new vlan bpf >> > extensions by attempting to load a filter that uses them. As only valid >> > filters can be loaded, old

Re: [tcpdump-workers] vlan tagged packets and libpcap breakage

2012-12-11 Thread Ani Sinha
> > It is possible to test for the presence of support of the new vlan bpf > extensions by attempting to load a filter that uses them. As only valid > filters can be loaded, old kernels that do not support filtering of vlan > tags will fail to load the a test filter with uses them. Unfortunately

Re: [tcpdump-workers] Decoding the unencrypted part(s) of SSL/TLS?

2012-12-11 Thread Rick Jones
On 12/11/2012 05:58 AM, Wesley Shields wrote: On Mon, Dec 10, 2012 at 11:38:29PM -0500, Michael Richardson wrote: "Rick" == Rick Jones writes: Rick> Is there a version of tcpdump in the works which will decode Rick> the unecrypted Rick> portions of an SSL/TLS session? Or do I