- Original Message -
From: "Darren Reed" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; "Guy Harris" <[EMAIL PROTECTED]>
Sent: Monday, April 12, 2004 5:14 PM
Subject: Re: [tcpdump-workers] Creeping GCC'sims in tcpdump
> In some email I received from Brian Ginsbach,
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To: "Gianluca Varenni" <[EMAIL PROTECTED]>
Cc: "Loris Degioanni" <[EMAIL PROTECTED]>; "Fulvio Risso"
<[EMAIL PROTECTED]>; "Michael Richardson" <[EMAIL
- Original Message -
From: "Fulvio Risso" <[EMAIL PROTECTED]>
To: "Gianluca Varenni" <[EMAIL PROTECTED]>; "Guy Harris"
<[EMAIL PROTECTED]>
Cc: "Loris Degioanni" <[EMAIL PROTECTED]>; "Michael Richardson"
<[EMAIL
eck if the
file is correct and understand its byte order).
Can we decide what is the final block type for the section header block?
Have a nice day
GV
- Original Message -
From: "Gianluca Varenni" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 26, 2004 5:
---
From: "Fulvio Risso" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: "Gianluca Varenni" <[EMAIL PROTECTED]>
Sent: Friday, July 30, 2004 12:48 AM
Subject: RE: [tcpdump-workers] Fw: new file format
I would like to point out advatanges / disadvatanges of the
two pro
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 14, 2004 1:45 AM
Subject: Re: [tcpdump-workers] Buffer size question
> Ed Maste wrote:
>
> > 1) Add a new pcap API function pcap_set_bufsize that can be used
> > to set the size u
Hi Felipe.
I haven't yet thought if it would be better to add it as an option, or as a
field of the IDB.
The idea is quite interesting, my only concern is related to losing some
information that is needed to dissect a packet properly. Suppose you have an
ethernet packet, and you strip the first
- Original Message -
From: "Felipe Kellermann" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, February 09, 2005 2:08 AM
Subject: Re: [tcpdump-workers] PCAP-NG suggestion
On Sun, 13 Feb 2005 2:28pm -0800, Loris Degioanni wrote:
I think a block with data that starts at an arbitrary position of
- Original Message -
From: "Felipe Kellermann" <[EMAIL PROTECTED]>
To: "Tcpdump Workers Mailing List"
Sent: Wednesday, February 09, 2005 2:04 AM
Subject: Re: [tcpdump-workers] PCAP-NG suggestion
On Sun, 13 Feb 2005 12:41pm +0100, Gianluca Varenni wrote:
I
Hi Ben.
I know the issue. The author of that page has rebuilt the web site (up to a
week or so ago it was "under construction"), the new page seems to be
http://www.micro-logix.com/WinPcap/Supported.asp
*but* it says "under construction".
Unfortunately, none of us (winpcap team) has stored that p
://www.micro-logix.com/WinPcap/Supported.asp
I've updated the FAQ on the winpcap web pages, as well.
Have a nice day
GV
- Original Message -
From: "Gianluca Varenni" <[EMAIL PROTECTED]>
To: ; <[EMAIL PROTECTED]>
Cc:
Sent: Sunday, February 20, 2005 7:30 PM
Subject:
- Original Message -
From: "Felipe Kellermann" <[EMAIL PROTECTED]>
To:
Sent: Sunday, February 20, 2005 9:44 PM
Subject: Re: [tcpdump-workers] PCAP-NG suggestion
On Sun, 20 Feb 2005 7:21pm +0100, Gianluca Varenni wrote:
Uhm. At first, I thought it was a great idea.
Hi all.
Is there any new plan for the release of libpcap 0.9?
I was planning of including libpcap 0.9 in WinPcap 3.1, which is scheduled
pretty soon (1 month or so).
Have a nice day
GV
- Original Message -
From: "Michael Richardson" <[EMAIL PROTECTED]>
To: "Guy Harris" <[EMAIL PROTECTED]
Just resending it as it was a reply to a quite oldish message...
Have a nice day
GV
- Original Message -
From: "Gianluca Varenni" <[EMAIL PROTECTED]>
To:
Sent: Monday, May 09, 2005 12:03 PM
Subject: Re: [tcpdump-workers] preperation for 3.9 branch
Hi all.
Is there any
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Monday, May 16, 2005 11:20 AM
Subject: Re: [tcpdump-workers] preperation for 3.9 branch
Gianluca Varenni wrote:
Is there any new plan for the release of libpcap 0.9?
At this point, I don't hav
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Thursday, June 02, 2005 2:30 PM
Subject: Re: [tcpdump-workers] pcap_dump_file & CO
On Jun 2, 2005, at 11:42 AM, Loris Degioanni wrote:
Trying to understand why the -C tcpdump option doesn't work under
Windows,
2005).
Have a nice day
Gianluca Varenni
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
lated
discussions. People interested in this project are welcome to join it, the
mailman web interface to subscribe is available at
https://www.winpcap.org/mailman/listinfo/ntar-workers
Have a nice day
Gianluca Varenni
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
Hi all.
Since the NTAR/pcap-ng topic spans multiple mailing lists, I suggest
everybody to send messages to the ntar-workers mailing list (I forgot to put
that mailing list in my original announcement mail, my bad...), so that it's
easier for everyone to follow the discussion (and in order to a
ently of NTAR? With or
without backwards compatibility at the file reading or API levels?
Thanks,
Stephen.
Gianluca Varenni wrote:
Hi all.
This mail is to announce the birth of the NTAR project. NTAR stands for
Network Trace Archival and Retrieval library, and is an implementation of
the PCAP
- Original Message -
From: "Hannes Gredler" <[EMAIL PROTECTED]>
To:
Cc:
Sent: Wednesday, July 13, 2005 4:35 AM
Subject: Re: [tcpdump-workers] print-slow.c
On Tue, Jul 12, 2005 at 11:10:38PM -0700, Loris Degioanni wrote:
| Some genius had the idea of adding a new file (print-slow.c)
P signed anything, or updated the web site yet.
If you can re-release 3.9.2 with the patches it would be better (otherwise
we will probably have 3.9.3 released few hours after the 3.9.2...).
Otherwise, 3.9.3 is ok.
Have a nice day
Gianluca Varenni
- --
] Michael Richardson Xelerance Co
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Friday, August 12, 2005 10:25 AM
Subject: Re: [tcpdump-workers] Pings fail unless tcpdump is watching both
Cian Masterson wrote:
Can anyone tell me what changes/hooks tcpdump puts into the stack that
might lead to
- Original Message -
From: "Rick Jones" <[EMAIL PROTECTED]>
To:
Sent: Thursday, November 10, 2005 11:05 AM
Subject: Re: [tcpdump-workers] CVS down? Daily snapshot script broken?
Albert Chin wrote:
Is CVS down?
$ cvs up
cvs [update aborted]: connect to cvs.tcpdump.org(205.150.200.1
Hi Evan.
Do you have any idea if performance is affected by these patches?
I'd probably expect almost no performance penalty in pcap_ftell() (apart
from the fact that you allocate memory with malloc), and some performance
hit with pcap_fseek (because basically you flush the FILE cache).
Have
- Original Message -
From: "David Rosal" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, November 23, 2005 5:26 AM
Subject: [tcpdump-workers] Paquets smaller than 64 bytes
Hello.
I'm monitoring an Ethernet link with tcpdump-3.9.4.
I've read that when packets are generated by the same machi
inPcap): it seems that the new server
doesn't accept SSH1 keys (we were still using old keys, our fault, I know).
Loris and me have already tried to contact Michael about these problems (we
have some win32 specific fixes we need to commit), without any luck.
Anyone here helping us?
Gianluca
Alexander,
I think you are referring to pcap-ng (the new file format that will
eventually substitute the old one generated by libpcap).
At the moment the only experimental implementation of pcap-ng is given by
the NTAR library, available at
http://www.winpcap.org/ntar
Have a nice day
GV
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Monday, January 09, 2006 12:09 PM
Subject: Re: [tcpdump-workers] where to get libpcap-ng?
On Jan 9, 2006, at 9:12 AM, alexander medvedev wrote:
As far as i understood NTAR is an implementation of the pcap-ng
st
libpcap,i.e. libpcap
will be able to read both formats: current pcap and pcap-ng;
NTAR will possibly be a back-end for libpcap's API to hide details;
- there are no dates when pcap-ng functionality will be included in the
current libpcap.
thanks,
-alexm
10:38 10/01/2006
On Tue, 10 Jan 2006, G
- Original Message -
From: "Michael Richardson" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, January 11, 2006 9:37 AM
Subject: Re: [tcpdump-workers] where to get libpcap-ng?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
"Guy" == Guy Harris <[EMAIL PROTECTED]> writes:
>> Are there
- Original Message -
From: <[EMAIL PROTECTED]>
To:
Sent: Thursday, January 12, 2006 3:11 PM
Subject: [tcpdump-workers] Multi process sniffing and dropped packets
Hi people!
I'm writing a sniffer with libpcap 0.9.3 that gets
packets and makes some cpu-intensive work with those.
I wan
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Thursday, January 12, 2006 5:17 PM
Subject: Re: [tcpdump-workers] Multi process sniffing and dropped packets
On Jan 12, 2006, at 3:29 PM, Gianluca Varenni wrote:
BUT..is pcap library able
- Original Message -
From: "Hannes Gredler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: ; <[EMAIL PROTECTED]>
Sent: Sunday, February 12, 2006 12:13 PM
Subject: [ntar-workers] PCAP-NG / Interface ID size / Drops Counter size ?
hi fulvio, et al,
i was digesting the pcap-ng spec an
I would probably use pcap_next_ex instead of pcap_loop (pcap_next_ex is
available on recent versions of libpcap, let's say at least for the last 2-3
years). If you use pcap_next_ex you basically create your own capture loop,
and so you can break it whenever you want.
GV
- Original Messag
- Original Message -
From: "Harley Stenzel" <[EMAIL PROTECTED]>
To:
Sent: Friday, October 06, 2006 10:46 AM
Subject: [tcpdump-workers] Headroom
Greetings--
Has the idea of headroom for libpcap-based stack applications been
discussed before? The idea is to have a known amount of empt
- Original Message -
From: "Harley Stenzel" <[EMAIL PROTECTED]>
To:
Sent: Friday, October 06, 2006 12:25 PM
Subject: Re: [tcpdump-workers] Headroom
On 10/6/06, Gianluca Varenni <[EMAIL PROTECTED]> wrote:
Uhm, what's the purpose of some amount of memory
- Original Message -
From: "Harley Stenzel" <[EMAIL PROTECTED]>
To:
Sent: Monday, December 04, 2006 1:30 PM
Subject: Re: [tcpdump-workers] pcap files with file header snaplen < packet
On 12/4/06, Gerald Combs <[EMAIL PROTECTED]> wrote:
Harley Stenzel wrote:
> Looking forward, howev
- Original Message -
From: "Michael Richardson" <[EMAIL PROTECTED]>
To:
Sent: Monday, March 26, 2007 12:50 PM
Subject: Re: [tcpdump-workers] USB support in libpcap
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
"Jon" == Jon Smirl <[EMAIL PROTECTED]> writes:
Jon> For example wi
Guys,
it looks like the optimizer for the BPF compiler has a bug and removes some
needed LD instructions. This happens on the HEAD and 0.9.x branch (I tested
it with optimize.c 1.87 and 1.85.2.1 as well as older versions).
Details
Linktype: DLT_802_11_RADIO (802.11 + radiotap) or DLT_802_11
F
Guys,
the attached patch fixes some of the problems in the current wlan code
generation of pcap_compile.
In particular it should fix these problems:
1. the 802.11 header size of a data frame has not a fixed size. When the QoS
bit is set in the subtype field (QoS DATA frame), the header is two
The attachment got somewhat dropped.
You can find it here
http://www.winpcap.org/gianluca/wlan_filtering.patch
GV
- Original Message -
From: "Gianluca Varenni" <[EMAIL PROTECTED]>
To:
Sent: Thursday, June 14, 2007 2:19 PM
Subject: [tcpdump-workers] Patches fo
It looks like it got released last week on the 13th, but no announcement was
sent out (I haven't received it, and it's notpresent in any of the working
mailing list archives).
This scares me a bit, as I was committing some fixes exactly the day after
the release...
Have a nice day
GV
-
Th
I guess it's some sort of TCP offloading done at the board level. The driver
sends big frames (>1500bytes) to the NIC card, and the NIC card is
responsible from creating smaller segments that are sent over the wire. I've
seen a similar behavior on Windows with some gigabit network cards (if i
r
Wasn't there supposed to be a x.9.7 release due a couple weeks ago, fixing
the issue?
Have a nice day
GV
- Original Message -
From: "Bruce M Simpson" <[EMAIL PROTECTED]>
To:
Sent: Friday, July 06, 2007 6:56 AM
Subject: Re: [tcpdump-workers] tcpdump v3.9.6 archive incorrect version ?
- Original Message -
From: "Michael Richardson" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, July 10, 2007 12:41 PM
Subject: Re: [tcpdump-workers] Patches for wlan filtering
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Oh, stupid me.
I see the patch is already applied by you. I read th
[Posted again as it looks like the mail server rejected my 1st attempt]
Is there any reason why the e-mail starts with
This email contains confidential material.
???
Have a nice day
GV
- Original Message -
From: "Automatic cvs log generator /tcpdump/bin/makelog" <[EMAIL PROTECTED]>
[Posted again as it looks like the mail server rejected my 1st attempt]
No problem at all.
Talking about the website, would it be possible to fix the mailing list
archive (http://www.tcpdump.org/lists/workers/), as it's stuck at the end of
2006?
And finally, in the page at http://www.tcpdump.org
Uhm...
I agree with you. The server is either really slow or completely down.
Have a nice day
GV
- Original Message -
From: "Luis Martín García" <[EMAIL PROTECTED]>
To:
Sent: Monday, August 06, 2007 1:47 AM
Subject: [tcpdump-workers] Tcpdump web down?
Hi,
I've been trying to acce
Ken,
I just got back from my vacation. I'd just like to test that the 0.9/3.9
branches of libpcap and tcpdump compile correctly under windows (within
winpcap and windump). I can do that this morning. Do I still have time for
that?
Have a nice day
GV
- Original Message -
From: "Ken
indows. I can probably easily fix it by taking the
needed files from BSD, but it make take a couple hours to do that.
Can we delay the release of 0.9.8/3.9.8 until tomorrow?
GV
- Original Message -
From: "Gianluca Varenni" <[EMAIL PROTECTED]>
To:
Cc: "Mich
Well, I've just pulled a couple include files out of BSD and now it compiles
under VC6. I still have some minor issues compiling everything under Cygwin,
but it's not related to PFVAR.
Have a nice day
GV
On Thursday 13 September 2007, Gianluca Varenni wrote:
...
-print-pflog.c:
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Thursday, September 13, 2007 10:45 AM
Subject: Re: [tcpdump-workers] tcpdump 3.9.8 / libpcap 0.9.8 releases
Gianluca Varenni wrote:
After a quick compilation test, libpcap compiles ok (albe
ng... we'll hold off until your ready.
On Thu, 13 Sep 2007, Gianluca Varenni wrote:
After a quick compilation test, libpcap compiles ok (albeit with some new
warnings popping out from VC6).
tcpdump (0.9.x branch) has some problems, instead:
- print-rsvp.c doesn't compile as it's
As a matter of facts, libpcap includes files with more different licenses.
That's why for WinPcap I came out with the long license available at
http://www.winpcap.org/misc/copyright.htm
Consider that some of those licenses apply to Windows only (as some files
are included in the windows build,
Ken,
is there a date for the release of tcpdump 4.0 and libpcap 1.0? I've
committed some mods to make libpcap 1.0 compile within WinPcap, I still need
a couple tweaks in tcpdump (some code related to signals was added in
tcpdump, and obviously that doesn't compile under windows).
Have a nice
Does windump capture with your modified wpcap.dll?
I think that debugging your new version of wpcap.dll with a simpler application
like windump or any of the samples in the winpcap developer's pack will ease
your development.
Also, I would use a debug version of wpcap.dll and attach a debugger
Since the plan is to release libpcap 1.0/tcpdump 4.0 at the end of the
month, I'm back (again) bugging people wrt a patch I submitted some time ago
for wireless filtering for which I didn't have any feedback.
The mail is archived here
http://article.gmane.org/gmane.network.tcpdump.devel/2268
Guy,
thanks for taking care of this.
Have a nice day
GV
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, October 30, 2007 3:42 AM
Subject: Re: [tcpdump-workers] Patches for wlan filtering
Gianluca Varenni wrote:
the attached pat
I think there are still problems.
www.tcpdump.org correctly resolves to the new IP address, but it's not
reachable at least from here in CA through AT&T/SBC.
A traceroute to www.tcpdump.org shows this
4 9 ms 8 ms 8 ms dist2-vlan50.scrm01.pbi.net [64.171.152.67]
5 8 ms 7
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Monday, November 05, 2007 2:03 PM
Subject: Re: [tcpdump-workers] Patches for wlan filtering
Guy Harris wrote:
On Oct 30, 2007, at 3:42 AM, Guy Harris wrote:
I won't be able to fix that tonight, but, if we delay t
Checked in on HEAD and the libpcap_1_0 branch.
Thanks!
GV
- Original Message -
From: "Gisle Vanem" <[EMAIL PROTECTED]>
To: "tcpdump-workers"
Sent: Tuesday, November 06, 2007 6:04 AM
Subject: [tcpdump-workers] typo in pcap.c
--- CVS-Latest/pcap.c Wed Oct 17 17:52:41 2007
+++ pcap.
ay
GV
- Original Message -
From: "Ken Bantoft" <[EMAIL PROTECTED]>
To:
Cc: "Stephen Donnelly" <[EMAIL PROTECTED]>; "Guy Harris"
<[EMAIL PROTECTED]>; "Gianluca Varenni" <[EMAIL PROTECTED]>
Sent: Monday, November 05, 2007 5:47 PM
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Monday, November 05, 2007 6:12 PM
Subject: Re: [tcpdump-workers] Patches for wlan filtering
On Nov 5, 2007, at 2:49 PM, Gianluca Varenni wrote:
I plan to compare this with the old versio
[new BPF code, CVS snapshot. Not working]
(000) ldb [3]
(001) lsh #8
(002) tax
(003) ldb [2]
(004) or x
(005) st M[0]
(006) tax
(007) txa
(008) add #24
(009) st M[1]
(010) ldb [x + 0]
(011) jset #0x8 jt 12 jf 17
(012) jset #0x4
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 06, 2007 11:14 AM
Subject: Re: [tcpdump-workers] Patches for wlan filtering
Gianluca Varenni wrote:
I already noticed that the new BPF code doesn't check the
link-t
It seems to work ok.
Thanks!
GV
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, November 06, 2007 11:12 AM
Subject: Re: [tcpdump-workers] Patches for wlan filtering
Gianluca Varenni wrote:
I think I found the problem:
Yup, I just
t; Changed title from "TCPDUMP public repository" to "TCPDUMP/LIBPCAP
public repository"
The new version can be accessed at http://www.tcpdump.org/index2.html
Please let me know what you think. If everyone is OK with the changes
I'll swap the current with this one.
Have a nice day
GV
smime.p7s
Description: S/MIME cryptographic signature
Guys,
I don't know what the status of the libpcap 1.0/tcpdump 4.0 release is, but
I'd like to hold on the release for a day or so.
I've just found (another) bug in the BPF compiler for wireless link types. A
simple filter like "link src host 11:22:33:44:55:66" seems to discard all
the packet
- Original Message -
From: "Arien Vijn" <[EMAIL PROTECTED]>
To:
Cc: "Arien Vijn" <[EMAIL PROTECTED]>
Sent: Monday, November 26, 2007 10:13 AM
Subject: Re: [tcpdump-workers] (another) bug in the BPF compiler (wireless)
Hi,
On 26 Nov 2007, at 19:05,
her) bug in the BPF compiler
(wireless)
> Hi,
>
> On 26 Nov 2007, at 19:05, Gianluca Varenni wrote:
>
>> I don't know what the status of the libpcap 1.0/tcpdump 4.0 release
>> is,
>> but I'd like to hold on the release for a day or so.
>>
>>
I think the answer to this question is "no". Right?
Have a nice day
GV
- Original Message -
From: Sassone, Ed
To: [EMAIL PROTECTED]
Sent: Tuesday, November 27, 2007 1:36 PM
Subject: [Winpcap-users] Using filters with IP encapsulation (RFC 2003)
Hello.
Is there a way to use filter
: Re: [tcpdump-workers] Fw: [Winpcap-users] Using filters with IP
encapsulation (RFC 2003)
No,
You can look at the offset at which the IP addresses of the
encapsulated IP packet are in the frame and compare it to the
encapsulated address as an octetsting.
Luis
On Nov 28, 2007 6:38 PM, Gianluca
From what you said, you basically changed the behavior of the snaplen
parameter of pcap_open_live(). At the risk of being annoing, I find it a
really bad idea. If it's called snaplen, it's the snaplen, period.
Isn't it possible to add a pcap function to set such parameter (or
eventually create a
I agree with you.
Consider that under windows, for example, we have a windows-only function to
set the kernel buffer size
(http://www.winpcap.org/docs/docs_40_2/html/group__wpcapfunc.html#g124bde25ccd9e39017ff2abec2dda623)
and the kernel buffer in WinPcap is actually a ring buffer (although we
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Thursday, December 06, 2007 4:09 PM
Subject: Re: [tcpdump-workers] [PATCH] enable memory mapped access to
ethernet device for linux
There's also an issue that with the ringbuffer, the initial contents can
be qu
- Original Message -
From: "Michael Richardson" <[EMAIL PROTECTED]>
To:
Cc: "Peter Losher" <[EMAIL PROTECTED]>; "Joao Damas" <[EMAIL PROTECTED]>
Sent: Sunday, December 09, 2007 2:53 PM
Subject: Re: [tcpdump-workers] tcpdump patches...
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- Original Message -
From: "Alexander Dupuy" <[EMAIL PROTECTED]>
To:
Sent: Monday, December 10, 2007 10:42 AM
Subject: Re: [tcpdump-workers] [PATCH] enable memory mapped access to
ethernet device for linux
Guy Harris asked:
How does pcap_setbufsize() differ from pcap_setbuff()?
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Monday, December 10, 2007 1:29 PM
Subject: Re: [tcpdump-workers] [PATCH] enable memory mapped access to
ethernet
Gianluca Varenni wrote:
why not using a different return value instead of a stri
- Original Message -
From: "Alexander Dupuy" <[EMAIL PROTECTED]>
To: "tcpdump-workers"
Sent: Wednesday, December 12, 2007 7:52 AM
Subject: Re: [tcpdump-workers] [PATCH] enable memory mapped access to
ethernet
Gianluca Varenni wrote:
Having a functio
Any news about this release?
Ken Bantoft announced a released candidate to be out in mid november, but
nothing happened.
Have a nice day
GV
smime.p7s
Description: S/MIME cryptographic signature
- Original Message -
From: "alexander medvedev" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, January 30, 2008 8:48 AM
Subject: [tcpdump-workers] libpcap 1.0 q
Hi,
I am also interested in when libpcap 1.0 will be out.
Could I know more about its features?
Will it support the next gener
eady a DLT named DLT_CAN20B, there is no need for another
CAN DLT.
You should probably ask Gianluca Varenni whether the format they use at
CACE Technologies matches the format you want to use, if you haven't done
so already.
-
This is the tcpdump-workers list.
Visit https://cod.sandelma
Hi all.
I've just seen that all the documentation of libpcap has been migrated from
a single pcap.3 file to single .3pcap files, one per function (more or
less).
Within WinPcap I have a big problem in generating the documentation. Within
WinPcap we generate html with doxygen out of an (outda
- Original Message -
From: "Guy Harris" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, April 09, 2008 3:48 PM
Subject: Re: [tcpdump-workers] Libpcap 1.0, WinPcap and documentation
Gianluca Varenni wrote:
Within WinPcap I have a big problem in generating the docume
Same for the CVS, which is AFAIK hosted on the same machine.
Have a nice day
GV
smime.p7s
Description: S/MIME cryptographic signature
- Original Message -
From: "Eloy Paris" <[EMAIL PROTECTED]>
To:
Sent: Thursday, November 13, 2008 3:24 PM
Subject: Re: [tcpdump-workers] libpcap & poll()
Hi Ben,
On Thu, Nov 13, 2008 at 03:13:05PM -0800, Ben Greear wrote:
[...]
The code above works on Solaris, but does not work
- Original Message -
From: "Ben Greear" <[EMAIL PROTECTED]>
To:
Sent: Thursday, November 13, 2008 9:38 PM
Subject: Re: [tcpdump-workers] libpcap & poll()
Aaron Turner wrote:
On Thu, Nov 13, 2008 at 8:15 PM, Ben Greear <[EMAIL PROTECTED]>
wrote:
I guess you have some way of knowin
Libpcap as-is does not compile within cygwin. You need to use WinPcap. The
WinPcap devpack does provide the necessary lib files for the cygwin build
environment.
http://www.winpcap.org/devel.htm
Hope it helps
GV
- Original Message -
From: "Sa-nga Chotikapakorn" <[EMAIL PROTECTED]>
- Original Message -
From: "Abdelrazak Younes" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, December 09, 2008 7:05 AM
Subject: [tcpdump-workers] pcap_findalldevs_ex() and libpcap
Hello there,
I am slowly learning libcap which I find quite useful, thanks a lot to the
authors.
I have th
I have some problems using the shared version of libpcap.
Environment: fresh installation of a Debian 4.0r5 x86
I compiled the 1.0.1rc1 sources with
make shared;make install;make install-shared
(BTW, you need to run both "install" and "install-shared" because the latter
doesn't install the in
- Original Message -
From: "Guy Harris"
To:
Sent: Sunday, December 21, 2008 12:26 PM
Subject: Re: [tcpdump-workers] TCPDUMP 4.0.1rc1 and LIBPCAP 1.0.1rc1
available for testing
On Dec 21, 2008, at 1:25 AM, Gianluca Varenni wrote:
When I run it, I get
./a.out: e
- Original Message -
From: "Guy Harris"
To:
Sent: Friday, February 06, 2009 11:06 AM
Subject: Re: [tcpdump-workers] start pcap in two thread
On Feb 6, 2009, at 7:24 AM, David Andrey wrote:
Can 2 threads (in the same process) start each one a sniffing session
on the same interfa
- Original Message -
From: "Chris Morgan"
To:
Sent: Tuesday, March 03, 2009 7:33 PM
Subject: Re: [tcpdump-workers] Hardware mac address with pcap/winpcap
...
Is the development of pcap such that such a feature might be present
in the next several months? Even something that would w
dress with pcap/winpcap
On Mar 4, 2009, at 9:19 AM, Gianluca Varenni wrote:
In the case of Windows/WinPcap, we have an internal Packet API to get
the MAC address, the main problem is exposing such MAC address at the
pcap API level. I actually didn't know that findalldevs was ret
The file "signature.h" seems to be missing from the tcpdump package, so
tcpdump does not compile (well, WinDump).
Is this file supposed to be part of a standard *nix distribution?
Have a nice day
GV
- Original Message -
From: "Ken Bantoft"
To:
Sent: Wednesday, March 25, 2009 7:22 A
Have a nice day
GV
smime.p7s
Description: S/MIME cryptographic signature
t another
set, and ask MCR to sign them ;)
Ken
On 29-Apr-09, at 11:29 AM, Gianluca Varenni wrote:
Have a nice day
GV
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
- Original Message -
From: "Guy Harris"
To:
Sent: Wednesday, July 01, 2009 12:47 PM
Subject: Re: [tcpdump-workers] [Fwd: Re: Thread Safe Lexer]
On Jul 1, 2009, at 12:04 PM, Behdad Forghani wrote:
Gianluca asked me to forward this to the mailing list. During
Sharkfest09 he had me
1 - 100 of 140 matches
Mail list logo
