Re: [tcpdump-workers] Promiscuous mode and BPF filters?

2004-12-02 Thread Claudio Lavecchia
Guy Harris wrote: if it *does* use "pcap_compile()" and "pcap_setfilter()", i.e. it already does packet filtering, it *adds* to the filter an expression to reject all the traffic from laptop B, i.e. instead of filtering with an expression X, you filter with "(not wlan src BB:BB:BB:BB:BB:BB)

[tcpdump-workers] Promiscuous mode and BPF filters?

2004-12-01 Thread Claudio Lavecchia
Hello ppl, I need a little assistance from you experienced packet filtering guys: I am running a Linux Redhat 7.3 distribution (kernel version 2.4.18-3). My problem is the following: I have two laptops (say A and B) that have 802.11 wireless cards. I am developing some application that essentially

Re: [tcpdump-workers] Wrong tcp sequence numbers???

2004-09-22 Thread Claudio Lavecchia
Jefferson Ogata wrote: Claudio Lavecchia wrote: I am using a libpcap based packet dissector to sniff WLAN traffic: I read tcp packets using the structure: struct sniff_tcp { u_short th_sport; /* source port */ u_short th_dport

[tcpdump-workers] Wrong tcp sequence numbers???

2004-09-21 Thread Claudio Lavecchia
Hello ppl, I got a quite easy question for you guys: I am using a libpcap based packet dissector to sniff WLAN traffic: I read tcp packets using the structure: struct sniff_tcp { u_short th_sport; /* source port */ u_short th_dport; /* desti

[tcpdump-workers] LLC protocol, ethereal and pcap libraries get along togheter?

2004-07-07 Thread Claudio Lavecchia
Title: Message Hello list,   Writing a packet dissector based on pcap libraries on Linux and using it to sniff traffic going through a WLAN (dell truemobile 1150 with orinoco driver) card I noticed a really strange behaviour. The card is set in promiscous mode, and I used Ethereal to dump t

[tcpdump-workers] Data from packet dissector looks really weird

2004-06-29 Thread Claudio Lavecchia
Title: Message Hello everybody,   I am writing a packet dissector using libpcap and I have a nasty bug that is giving me hard times. I would be glad if someone could explain me what is going on.   I use libpcap 0.7.2 and run my packet dissector on two different environments (redhat 7.3 and

[tcpdump-workers] Ethernet type in wrong byte order

2004-06-23 Thread Claudio Lavecchia
Title: Message  Hello,I am using libpcap to build a sniffer.I define an ethernet header as follows :/* Ethernet header */  struct sniff_ethernet {    u_char  ether_dhost[ETHER_ADDR_LEN];    // Destination host address     u_char  ether_shost[ETHER_ADDR_LEN];    // Source host addre

Re: [tcpdump-workers] Web page needs updating

2004-06-23 Thread Claudio Lavecchia
Is the forum still working? I tried to post earlier today and nothing happened. No posting in the mailing list archive, no reply, just nothing. Now I see that the last mail posted in the forum seems to contain a virus. Did that harm the mailing list server or something? C -Original Message--