Re: [tcpdump-workers] libpcap: 64bit machine has no compatible 32-bit libpcap library

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 7:22 AM, Michael Richardson wrote: >> "wen" == wen lui writes: >wen> I want to compile a `.c` file to 32-bit executable using `gcc` >wen> option `-m32` with libpcap the machine is linux 64bit fedora 16 > >wen> how to solve this problem? thanks! > > install

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 7:55 AM, Michael Richardson wrote: >Guy> 4.4.0rc2 appears to have stuff that's in the trunk but not the >Guy> tcpdump_4_4rel0 branch, such as print-msnlb.c, print-vxlan.c, >Guy> and print-otv.c, a change to print-bgp.c, and a change to the >Guy> Makefile not t

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Wesley Shields
On Sun, Mar 24, 2013 at 05:52:51PM -0400, Michael Richardson wrote: > > > "Romain" == Romain Francoise writes: > >> please expect a new release candidate on 2013-03-09, assuming I > >> can get enough Internet in St.Johns. > > Romain> Not sure if this was St John's in Antigua or S

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Denis Ovsienko
> 4.4.0rc2 appears to have stuff that's in the trunk but not the > tcpdump_4_4rel0 branch, such as print-msnlb.c, print-vxlan.c, and > print-otv.c, a change to print-bgp.c, and a change to the Makefile not to > have an explicit list of tests but to run a find command to find the tests.   > Is t

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Michael Richardson
> "Guy" == Guy Harris writes: Romain> In any case the rc2 tarballs are nowhere to be found. Can we Romain> get an update, please? >> http://www.ca.tcpdump.org/beta/ Guy> 1.4.0rc2 looks good, although I just checked into the trunk, libpcap 1.4.0rc3 packaged with the bt patch.

Re: [tcpdump-workers] libpcap: 64bit machine has no compatible 32-bit libpcap library

2013-03-25 Thread Michael Richardson
> "wen" == wen lui writes: wen> I want to compile a `.c` file to 32-bit executable using `gcc` wen> option `-m32` with libpcap the machine is linux 64bit fedora 16 wen> how to solve this problem? thanks! install a 32-bit libpcap. I don't know how to do this on Fedora, but I'm s

Re: [tcpdump-workers] Is user question allowed here?

2013-03-25 Thread Michael Richardson
> "ishare" == ishare writes: ishare> But ,after client send/receive several packets to/from ishare> server ,only to find 0 packet have been captured by tcpdump. ishare> My command is : tcpdump tcp you didn't use the -w option.

[tcpdump-workers] libpcap: 64bit machine has no compatible 32-bit libpcap library

2013-03-25 Thread wen lui
I want to compile a `.c` file to 32-bit executable using `gcc` option `-m32` with libpcap the machine is linux 64bit fedora 16 however, I get the following error [root@fdf source]# gcc -m32 -o test_tcp test_tcp.c -lpcap /usr/bin/ld: skipping incompatible /usr/lib64/libpcap.so when searchi

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Guy Harris
On Mar 24, 2013, at 2:52 PM, Michael Richardson wrote: >Romain> In any case the rc2 tarballs are nowhere to be found. Can we >Romain> get an update, please? > > http://www.ca.tcpdump.org/beta/ 1.4.0rc2 looks good, although I just checked into the trunk, and propagated to the libpcap_1

Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Tomasz Moń
On Mon, Mar 25, 2013 at 11:08 AM, Guy Harris wrote: >> #pragma pack(1) >> typedef struct >> { >> USHORT headerLen; /* This header length */ >> UINT64 irpId; /* I/O Request packet ID */ > > So headerLen is at an offset of 0, and irpId is at an offset of 2, right? Exactly.

[tcpdump-workers] Is user question allowed here?

2013-03-25 Thread ishare
is question about use of tcpdump allowed in this list? I am running linux in vmware and use tcpdump to capture all tcp packets send/receive by its virtual net card,the server and client are running at the same host . But ,after client send/receive several packets to/from server ,o

Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 2:48 AM, Tomasz Moń wrote: > For the USBPcap project I would like to request a new link-layer > header type value: > LINKTYPE_USBPCAP > DLT_USBPCAP > > Capture format specification is available at the project website [1] > and could be described as pseudo-header for USB pack

[tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Tomasz Moń
Hello, For the USBPcap project I would like to request a new link-layer header type value: LINKTYPE_USBPCAP DLT_USBPCAP Capture format specification is available at the project website [1] and could be described as pseudo-header for USB packets captured using USBPcap on Microsoft Windows. Regard

Re: [tcpdump-workers] libpcap timeout weirdness

2013-03-25 Thread Robert Monaghan
My current code (before using libpcap) uses this very method. I set up a raw socket, set the DEMUX type, and I capture traffic. The problem with this approach is that it seems to have a fair bit of overhead in the OS. (At least on the Mac.) I have to throttle traffic down my hardware to about 25