Gianluca Varenni wrote:
Is there any new plan for the release of libpcap 0.9?
At this point, I don't have anything additional planned for tcpdump (other than perhaps grabbing some more capture files from the Ethereal Web site and from mail to the Ethereal list, and running tcpdump against those captures and "fuzzed" versions of those captures), but the fuzzed captured tests I've run all pass now (which doesn't mean there aren't any more bugs for fuzz testing to find, but it means that some obvious ones were fixed).
I don't have anything additional planned for libpcap, either, although if somebody has a tested multi-platform patch to support files >4GB on platforms that support that (without breaking platforms that don't), that might be interesting.
Limited support for reading next-generation captures (the additional record types and options can largely just be ignored, and captures with interfaces of more than one type can cause an error when an interface with a different type is seen, for example) might also be nice, as it'd make systems with 0.9 capable of some reading capture files written by whatever future release (presumably 1.0) writes them.
So I'd say (assuming that we haven't broken builds on any platforms with recent changes), we're ready to go if the libpcap changes I mentioned won't make it and if nobody else has anything ready to go in that they'd like for 0.9/3.9.
I was planning of including libpcap 0.9 in WinPcap 3.1, which is scheduled pretty soon (1 month or so).
If so, you might want to look at supporting pcap_setdirection() - or a subset thereof - on versions of Windows where you can request not to see packets sent by the machine; I think people have asked for that.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
