[tcpdump-workers] [PATCH] Recent changes in Libosip2 break TCPslice compilation with SIP tracking enabled

a way to make TCPslice adapt itself to old & new APIs :-) Regards, -- Sebastien Raveau *** sessions.c.orig 2008-09-01 11:02:25.0 +0200 --- sessions.c 2008-09-01 10:03:42.0 +0200 *** *** 327,332 --- 327,335 dumper_close(elt->dumper); fr

Re: [tcpdump-workers] Passing the PCAP file descriptor to another

On Monday 23 October 2006 10:27, Guy Harris wrote: > > * first I have to include the pcap-int.h file in order to be able to mess > > with Libpcap's internals, starting with pcap_t::fd, and as you (may not) > > know this file never gets installed in /usr/include :) > > ...because libpcap's

[tcpdump-workers] Passing the PCAP file descriptor to another process

Greetings everybody :) I'm currently trying to pass the file descriptor of a live capture to another process, so that I can have a very small (as in "auditable") privileged process able to call pcap_open_live() on the one hand, and a big/fat/ugly/gui process on the other hand running all the p

[tcpdump-workers] [PATCH] Do not cut established TCP connections and VoIP calls with Tcpslice

Hi list, I sent this email weeks ago but it is still pending approval from the moderators because of its size, so I'm sending it again, this time without attachment. The patch itself is available at this address: http://www.epita.fr/~raveau_s/tcpslice_follow_tcp_and_voip.patch The following is

Re: [tcpdump-workers] about struct in_addr

On Saturday 06 May 2006 06:18, Lan Qing wrote: > the struct in_addr have only one variable in it, is there any necessary to > define a struct like that? > why not use "typedef in_addr_t in_addr;" directly? POSIX (the standard for UNIX software) states that: "The header shall define the in_addr s

[tcpdump-workers] [PATCH] compress savefiles after each rotation

<[EMAIL PROTECTED]> Sebastian Krahmer <[EMAIL PROTECTED]> + Sebastien Raveau <[EMAIL PROTECTED]> Sebastien Vincent <[EMAIL PROTECTED]> Seth Webster <[EMAIL PROTECTED]> Shinsuke Suzuki <[EMAIL PROTECTED]> Only in tcpdump: Makefile Only in tcpdump: add

[tcpdump-workers] post-capture BPF filtering (feature proposal)

Hello, After having used libpcap with great pleasure for years (thanks to all the people working on it), I think I just found a limitation to it... I am writing a sniffer with support for both ARP poisoning and BPF filtering. The problem is: if I want to impersonate a router for example, ARP p