Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-10-04 Thread Guy Harris
On Apr 3, 2007, at 2:57 PM, Richard Stearn wrote: Guy Harris wrote: pcap-linux.c could map ARPHRD_AX25 to DLT_AX25_KISS, which means AX. 25 captures done on Linux will have a file type of DLT_AX25_KISS. As in: declare DLT_AX25_KISS as X and change: pcap-linux.c 1140 case ARPHRD

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-03 Thread Richard Stearn
Guy Harris wrote: Richard Stearn wrote: Adding DLT_AX25_KISS is the obvious way to go with the exception that Linux identifies AX.25 in KISS packets as DLT_AX25 (protocol 3). "Identifies" in what sense? As in returns 3 as an identifier of the protocol type. I don't see any use of DLT_AX2

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-03 Thread Guy Harris
Richard Stearn wrote: Adding DLT_AX25_KISS is the obvious way to go with the exception that Linux identifies AX.25 in KISS packets as DLT_AX25 (protocol 3). "Identifies" in what sense? I don't see any use of DLT_AX25 in the 2.6.20.4 kernel. It appears to use ARPHRD_AX25 as the arphrd value

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-01 Thread Richard Stearn
Guy Harris wrote: Richard Stearn wrote: What the implementors of AX.25 on Linux have done is to hand an KISS packet rather than a pure AX.25 packet to the protocol stack. This probably was to accomodate the existing base of hardware where packets were delivered to the system via an async seria

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-01 Thread Guy Harris
Guy Harris wrote: Is KISS a standard independent of Linux? Apparently: http://www.ax25.net/kiss.htm so DLT_AX25_KISS is, I think, the right way to go here. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-01 Thread Guy Harris
Richard Stearn wrote: What the implementors of AX.25 on Linux have done is to hand an KISS packet rather than a pure AX.25 packet to the protocol stack. This probably was to accomodate the existing base of hardware where packets were delivered to the system via an async serial port and the leng

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-01 Thread Richard Stearn
Guy Harris wrote: Richard Stearn wrote: + case DLT_AX25: + /* + * Currently, only raw "link[N:M]" filtering is supported. + */ + off_linktype = -1;/* variable, min 15, max 71 steps of 7 */ + off_nl = -1;/* variable, min 16, max 71 steps

Re: [tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-04-01 Thread Guy Harris
Richard Stearn wrote: + case DLT_AX25: + /* +* Currently, only raw "link[N:M]" filtering is supported. +*/ + off_linktype = -1; /* variable, min 15, max 71 steps of 7 */ + off_nl = -1;/* variable, m

[tcpdump-workers] Patch to add DLT_AX25 handling to libpcap

2007-03-28 Thread Richard Stearn
Greetings The definition of DLT_AX25 already exists (protocol 3). The attached patch adds recognition for the Amateur Radio AX.25 protocol to libpcap. This is an updated patch to my previous request. -- Regards Richard *** reference/libpcap-0.9.5/gencode.c 2006-09-13 08:36:19.000