Re: [tcpdump-workers] [RFC] Addition of link-layer header types for PCI, PCI-X, and PCI-Express

2020-10-25 Thread Aki Van Ness via tcpdump-workers
--- Begin Message --- On Sun, Oct 25, 2020 at 2:05 AM Guy Harris wrote: > > On Oct 21, 2020, at 1:56 PM, Aki Van Ness via tcpdump-workers > wrote: > > > I'm working on a project that plans to store PCI and PCI-Express > > packets in the pcapng format as that&#

Re: [tcpdump-workers] [RFC] Addition of link-layer header types for PCI, PCI-X, and PCI-Express

2020-10-24 Thread Aki Van Ness via tcpdump-workers
--- Begin Message --- On Sat, Oct 24, 2020 at 5:32 PM Michael Richardson wrote: > > > Aki Van Ness wrote: > > Yeah it might be possible to use something like a single DLT. The issue > > I can possibly forsee with that is PCI, PCI-X, and PCI-Express are all >

Re: [tcpdump-workers] [RFC] Addition of link-layer header types for PCI, PCI-X, and PCI-Express

2020-10-23 Thread Aki Van Ness via tcpdump-workers
--- Begin Message --- On Thu, Oct 22, 2020 at 7:38 PM Michael Richardson wrote: > > > Aki Van Ness via tcpdump-workers wrote: > > I'm working on a project that plans to store PCI and PCI-Express > > packets in the pcapng format as that's the most appropria

[tcpdump-workers] [RFC] Addition of link-layer header types for PCI, PCI-X, and PCI-Express

2020-10-21 Thread Aki Van Ness via tcpdump-workers
--- Begin Message --- Hello, I'm working on a project that plans to store PCI and PCI-Express packets in the pcapng format as that's the most appropriate storage format and I really rather not roll something custom. As such what are thoughts on adding Link-Layer types for PCI, PCI-X, and PCI-Expr

Re: [tcpdump-workers] Filter works in tcpdump, but not in my libpcap

2006-12-31 Thread ness
== 0xbf)" " || (ether[6] == 0x00 && ether[7] == 0x09 && ether[8] == 0xbf)" ); you can just pass a string constant to pcap_compile(); you don't have to copy that string constant to a char array first. Yes, this was purposely done since I

[tcpdump-workers] Filter works in tcpdump, but not in my libpcap implementation?

2006-12-31 Thread ness
if( pcap_setfilter( pcap, &fp ) == -1 ) { return (-1); } ... pcap_loop( pcap, -47, (void *)packethandler, NULL ); ... void packethandler( u_char *user, const struct pcap_pkthdr *pkthdr, const u_char *packet ) { printf( "got packet\n" ); } Any ideas to why my ap