[tcpdump-workers] Florent DROUIN/FR/ALCATEL is out of the office.

I will be out of the office starting 26/03/2007 and will not return until 02/04/2007. I will respond to your message when I return. In the meantime, you can contact Lony Fischer - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Request for a new DLT for MTP2 with FCS

Hello Stephen, I am not sure to understand your comments. What is worth with this patch ? Is it to use the network datalink as a linktype and an extension ? Or is it to indicate the presence of FCS on 1 bit in the extension ? I did choose to indicate the presence of the FCS on 1 bit, beca

Re: [tcpdump-workers] Request for a new DLT for MTP2 with FCS

I agree with you, the problem I am speaking about, seems to be a common problem. It is very difficult to differentiate a frame with FCS (Frame Check Sequence) and a frame without, if we are just looking at the linktype. But, with the current libpcap, I do not see other solutions, than using differ

[tcpdump-workers] Request for a new DLT for MTP2 with FCS

Hello, I need a new datalink value (LINKTYPE_MTP2_FCS) to manage MTP2 frame with Checksum. (See http://www.wireshark.org/lists/wireshark-dev/200702/msg00206.html ) Once I will have the value, I will provide the patch for libpcap. Thanks in advance Best regards Florent - This is the tcpd

Re: [tcpdump-workers] Patch to release File Descriptors in pcap-dag.c

Hello Guy, I did test the changes, it works great. Additionally, could you replace the word LSU by LSSU in gencode.c, gencode.h, grammar.y and scanner.l. This is the exact term to use for MTP2 messages. << gencode.c: * LSSU, length is 1 or 2 gencode.c: case M_LSSU: gencode.h:#define

Re: [tcpdump-workers] segfault in libpcap

tcpdump-workers on Tue 1/30/2007 11:28 AM Florent Drouin wrote: > I have a systematical crash at tcpdump startup, when I am using libpcap > (2007-01-30) > I just add

[tcpdump-workers] segfault in libpcap

Hello, I have a systematical crash at tcpdump startup, when I am using libpcap (2007-01-30) I just add a test to check if the USB bus directory is present in pcap-usb-linux.c, and it seems to solve the problem. << cat pcap-usb-linux.c.diff --- pcap-usb-linux.c2007-01-30 10:54:42.0

Re: [tcpdump-workers] Patch for mtp2 filtering

Guy, Thank you for applying the patch, next time I will use the extension .txt with "diff -u" generated files. Concerning the MTP3 filters, they are working great. The base datalink is DLT_MTP2, but the filter is working on the MTP3 layer. But you are right, It seems the datalink for MTP3

Re: [tcpdump-workers] Patch for mtp2 filtering

I think the patch was discarded again in my last mail, so I post again but in full text mode. Sorry for the inconvenience.. (See attached file: scanner.l.diff)(See attached file: gencode.c.diff)(See attached file: gencode.h.diff)(See attached file: grammar.y.diff) Best regards, Florent - This i

Re: [tcpdump-workers] Patch for mtp2 filtering

Hello Guy, Well, I do not understand why the attachment was discarded ? Maybe the policy changed in the same time my email address ? Anyway, I have renamed the file Tar dot gz file and will send it again as attachment. (See attached file: mtp2_filtering.archivegz) Best regards, Florent

[tcpdump-workers] Patch for mtp2 filtering

Hello, Here is a short patch to implement filtering for MTP2 frames on SS7. You can now use "fisu", "lsu", or "msu" to filter the MTP2 messages at libpcap level. In most of the case, the filter to use will be "!fisu", to have only the significants frames. Additionaly, ou can use the alread