Your message dated Mon, 14 Sep 2009 18:47:29 +0000
with message-id <[email protected]>
and subject line Bug#546596: fixed in ngrep 1.45.ds2-7
has caused the Debian Bug report #546596,
regarding ngrep: "-d any" does not work
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
546596: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546596
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ngrep
Version: 1.45.ds2-6
Severity: important
hi!
when trying to dump traffic on "any" interface, here
is what I get from ngrep.
galador:/home/cco/ngrep-1.45.ds2# ngrep -d any
interface: any
fatal: unsupported interface type 113
same error happens when I try to read pcap files
that were captured using the "any" interface under linux.
I had a look at the debian conf/building rules. basically
what happens is that ./configure is called using:
--with-pcap-includes=/usr/include
which results in:
checking for DLT_LINUX_SLL in bpf.h... no
which in its turn seems to turn off:
HAVE_DLT_LINUX_SLL.
now, a quick look at the code (ngrep.c, line 531) reveals:
switch(pcap_datalink(pd)) {
case DLT_EN10MB:
link_offset = ETHHDR_SIZE;
break;
case DLT_IEEE802:
link_offset = TOKENRING_SIZE;
break;
case DLT_FDDI:
link_offset = FDDIHDR_SIZE;
break;
case DLT_SLIP:
link_offset = SLIPHDR_SIZE;
break;
case DLT_PPP:
link_offset = PPPHDR_SIZE;
break;
#if HAVE_DLT_LOOP
case DLT_LOOP:
#endif
case DLT_NULL:
link_offset = LOOPHDR_SIZE;
break;
#if HAVE_DLT_RAW
case DLT_RAW:
link_offset = RAWHDR_SIZE;
break;
#endif
#if HAVE_DLT_LINUX_SLL
case DLT_LINUX_SLL:
link_offset = ISDNHDR_SIZE;
break;
#endif
#if HAVE_DLT_IEEE802_11_RADIO
case DLT_IEEE802_11_RADIO:
radiotap_present = 1;
#endif
#if HAVE_DLT_IEEE802_11
case DLT_IEEE802_11:
link_offset = IEEE80211HDR_SIZE;
break;
#endif
default:
fprintf(stderr, "fatal: unsupported interface type %u\n",
pcap_datalink(pd));
clean_exit(-1);
}
so, when HAVE_DLT_LINUX_SLL is not defined, the interface type
DLT_LINUX_SLL is not taken into account, resulting in the error above.
using:
--with-pcap-includes=/usr/include/pcap re
for configure seems to turn HAVE_DLT_LINUX_SLL on:
checking for DLT_LINUX_SLL in bpf.h... yes
c...@galador:~/ngrep-1.45.ds2$ grep HAVE_DLT_LINUX_SLL *.h
config.h:#define HAVE_DLT_LINUX_SLL 1
I have not checked whether this really solves the problem though.
please investigate further.
bye now!
cristian
-- System Information:
Debian Release: 5.0
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.30.2amd64-galador (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages ngrep depends on:
ii libc6 2.9-23 GNU C Library: Shared libraries
ii libnet1 1.1.4-2 library for the construction and h
ii libpcap0.8 1.0.0-4 system interface for user-level pa
ii libpcre3 7.8-2 Perl 5 Compatible Regular Expressi
ngrep recommends no packages.
ngrep suggests no packages.
-- debconf-show failed
--- End Message ---
--- Begin Message ---
Source: ngrep
Source-Version: 1.45.ds2-7
We believe that the bug you reported is fixed in the latest version of
ngrep, which is due to be installed in the Debian FTP archive:
ngrep_1.45.ds2-7.diff.gz
to pool/main/n/ngrep/ngrep_1.45.ds2-7.diff.gz
ngrep_1.45.ds2-7.dsc
to pool/main/n/ngrep/ngrep_1.45.ds2-7.dsc
ngrep_1.45.ds2-7_amd64.deb
to pool/main/n/ngrep/ngrep_1.45.ds2-7_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Romain Francoise <[email protected]> (supplier of updated ngrep package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 14 Sep 2009 20:29:03 +0200
Source: ngrep
Binary: ngrep
Architecture: source amd64
Version: 1.45.ds2-7
Distribution: unstable
Urgency: low
Maintainer: Romain Francoise <[email protected]>
Changed-By: Romain Francoise <[email protected]>
Description:
ngrep - grep for network traffic
Closes: 546596
Changes:
ngrep (1.45.ds2-7) unstable; urgency=low
.
* debian/rules: Change pcap includes location so that configure.in can
find bpf.h in the correct pcap.h, thanks to Cristian Constantin
(closes: #546596).
Checksums-Sha1:
405ad06d4968222f0544d51342a70a3d86bb44f3 1182 ngrep_1.45.ds2-7.dsc
8efd1ef7f983ace79734da6bff0f77f35f2c1a4e 10587 ngrep_1.45.ds2-7.diff.gz
3435025797cb47d427a0ca8bb53a421abe02cd66 33762 ngrep_1.45.ds2-7_amd64.deb
Checksums-Sha256:
eb31183158a7efee3e910c0518f47177f8399c66670722736cbe9feefeb8974d 1182
ngrep_1.45.ds2-7.dsc
ccbf36bfa6ef5b1900a38a61a33015b5d27396fe2b71f56b392568688c0334d2 10587
ngrep_1.45.ds2-7.diff.gz
c0a12abf47ed17caeda03023bea63c48e80bd9b2c334ab026be7fbedbe4d4480 33762
ngrep_1.45.ds2-7_amd64.deb
Files:
3e833cf0055f541f81e32b114cdf15a7 1182 net optional ngrep_1.45.ds2-7.dsc
dc02742e85e02ed992286cb6998c5ebc 10587 net optional ngrep_1.45.ds2-7.diff.gz
f4457638f989faa395be6976c85f3ee4 33762 net optional ngrep_1.45.ds2-7_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iD8DBQFKrowOogN2vsA8Vt8RAi6NAJ91T/DqN8llEHGnwaCANMIMYZudHwCg1G0X
rb5aY9yPOJE+8Jhm/i/4cWk=
=pMqR
-----END PGP SIGNATURE-----
--- End Message ---
