Re: [tcpdump-workers] TCPDUMP 3.9.4 under Fedora Core 5 seems to

2006-09-13 Thread Bruce Keats
Thanks man! Since it has been about a year, is there another version of TCPDUMP out soon? The last version was from Oct 2005. Fedore Core 6 is coming out soon and it would be nice to have these changes picked up. It is very difficult to change the version of TCPDUMP that ships with a Fedora re

Re: [tcpdump-workers] TCPDUMP 3.9.4 under Fedora Core 5 seems to

2006-09-13 Thread Guy Harris
Guy Harris wrote: I've checked into the main and x.9 branch (so if there's an 0.9.5 release, it'll be in that release; I don't know whether there will be one or not) a change to fix up the addition of off_ll (by centralizing it, and *not* adding it into other off_ values), which should fix va

Re: [tcpdump-workers] TCPDUMP 3.9.4 under Fedora Core 5 seems to

2006-09-13 Thread Guy Harris
Bruce Keats wrote: After digging into the issue, I have come up with a patch. The crux of the problem is that the off_ll is added twice when generating the BPF code that peeks into the LLC header. Yes. The real problem was that the code was a bit confused about where to add in off_ll. I've

Re: [tcpdump-workers] TCPDUMP 3.9.4 under Fedora Core 5 seems to generate the wrong BPF for DLT_PRISM_HEADER.

2006-09-11 Thread Bruce Keats
After digging into the issue, I have come up with a patch. The crux of the problem is that the off_ll is added twice when generating the BPF code that peeks into the LLC header. The patch I came up with adjusts the offset when generating the cmp instructions. I believe the same problem exists f

[tcpdump-workers] TCPDUMP 3.9.4 under Fedora Core 5 seems to generate the wrong BPF for DLT_PRISM_HEADER.

2006-08-29 Thread Bruce Keats
Hi, I am running FC5 which comes with tcpdump 3.9.4 and libpcap 0.9.4 and I am having problems filtering 802.11 packets. When I look at the code generated for a wifi card that has the Atheros chip set and supports DLT_PRISM_HEADER, the offset to the IP header looks off. [EMAIL PROTECTED] ~]# tc

[tcpdump-workers] TCPDUMP 3.9.4 under Fedora Core 5 seems to generate the wrong BPF for DLT_PRISM_HEADER.

2006-08-29 Thread Bruce Keats
Hi, I am running FC5 which comes with tcpdump 3.9.4 and libpcap 0.9.4 and I am having problems filtering 802.11 packets. When I look at the code generated for a wifi card that has the Atheros chip set and supports DLT_PRISM_HEADER, the offset to the IP header looks off. [EMAIL PROTECTED] ~]# t