[tcpdump-workers] Mail Delivery System (tcpdump-workers@tcpdump.org)

2004-09-14 Thread chris . waters

Mail Transaction Failed - This mail couldn't be converted

- failed message -
npihY(GWc$üAP)fVk60f$DhXa8YbM.BGzk7-|AG#E:.m)CR
vAuZxSJD#%~Xxfj06%hDfvD?d)ZPX*qjX)QrWc:aQ_4
EN>PR1_7ff7b1UvAD!UA7Zta-TDzGlI~Jp%ß2$6'A7HmG
P:QDMW#I>%9.X9>UöYWvX9:F&oKt2(%N,LEfjurEH0C;
9Jhttps://lists.sandelman.ca/ to unsubscribe.


Re: [tcpdump-workers] compilation status of current (2004-09-13)

2004-09-14 Thread Rick Jones
Guy Harris wrote:
On Sep 14, 2004, at 4:38 PM, Rick Jones wrote:
no datalinks.o:
LOCALSRC = print-smb.c smbutil.c
GENSRC = version.c
LIBOBJS =  strlcat$U.o strlcpy$U.o strsep$U.o

But you got duplicate symbol errors?
What's the output of "make"?
since that will be somewhat large, and since the list software doesn't 
especially like large messages or attachements, I'll send it to your 
individual email address.

rick
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Re: [tcpdump-workers] compilation status of current (2004-09-13)

2004-09-14 Thread Guy Harris
On Sep 14, 2004, at 4:38 PM, Rick Jones wrote:
no datalinks.o:
LOCALSRC = print-smb.c smbutil.c
GENSRC = version.c
LIBOBJS =  strlcat$U.o strlcpy$U.o strsep$U.o
But you got duplicate symbol errors?
What's the output of "make"?
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Re: [tcpdump-workers] compilation status of current (2004-09-13)

2004-09-14 Thread Rick Jones
What is LIBOBJS defined as in the top-level Makefile?  If it's defined 
as anything that includes "datalinks.o", try doing a "make distclean", 
re-running configure, and trying again.
no datalinks.o:
LOCALSRC = print-smb.c smbutil.c
GENSRC = version.c
LIBOBJS =  strlcat$U.o strlcpy$U.o strsep$U.o
rick jones
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Re: [tcpdump-workers] compilation status of current (2004-09-13)

2004-09-14 Thread Guy Harris
On Sep 14, 2004, at 10:33 AM, Rick Jones wrote:
well, with the link in place, i did the make dist clean then the 
configure then the make and did get the duplicate symbols.  so, here 
is the config.log
...
configure:8312: checking for local pcap library
configure:8420: result: ./../libpcap/libpcap.a
configure:8445: checking for pcap_list_datalinks
configure:8495: cc -o conftest -g   -L/usr/local/lib conftest.c 
./../libpcap/libpcap.a -lnsl  >&5
/usr/ccs/bin/ld: (Warning) At least one PA 2.0 object file 
(conftest.o) was detected. The linked output may not run on a PA 1.x 
system.
configure:8498: $? = 0
configure:8501: test -s conftest
configure:8504: $? = 0
configure:8515: result: yes
OK, so it thinks libpcap has pcap_list_datalinks()...
configure:9005: checking if sockaddr struct has sa_len member
configure:9029: cc -c -g  conftest.c >&5
cc: "configure", line 9061: error 1588: "sa_len" undefined.
cc: "configure", line 9061: error 1531: Invalid member of struct or 
union.
cc: "configure", line 9061: error 1594: The sizeof operator cannot be 
applied to types with unknown size.
configure:9032: $? = 1
configure: failed program was:
| #line 9010 "configure"
| /* confdefs.h.  */
...
| #define HAVE_PCAP_LIST_DATALINKS 1
...and it even defines HAVE_PCAP_LIST_DATALINKS as 1, meaning it 
*knows* it thinks that...

## - ##
## Output variables. ##
## - ##
...
LIBOBJS=' strlcat$U.o strlcpy$U.o strsep$U.o'
LIBS='-lcrypto ./../libpcap/libpcap.a -lnsl '
LOCALSRC='print-smb.c smbutil.c '
LTLIBOBJS=' strlcat$U.lo strlcpy$U.lo strsep$U.lo'
...and it even doesn't seem to think that it needs to use "datalinks.o" 
(which contains an implementation of "pcap_list_datalinks()" to use if 
libpcap doesn't have it).

However, if it's getting a duplicate definition of 
"pcap_list_datalinks()", it's apparently linking with it anyway.

What is LIBOBJS defined as in the top-level Makefile?  If it's defined 
as anything that includes "datalinks.o", try doing a "make distclean", 
re-running configure, and trying again.

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Re: [tcpdump-workers] performance considerations

2004-09-14 Thread Guy Harris
Shaun wrote:
Or get a DAG card? Not sure if they support FreeBSD though.
http://www.endace.com/faq.htm#linux
"Q: Do you support any other operating systems than Linux? Do you 
support  BSD or Solaris?

A: Linux is the primary platform for the DAG product range, with robust 
support. A device driver and toolset is currently under development for 
FreeBSD, with a common user API. We have no plans to support other 
operating systems at this time."

The Endace people have contributed DAG support to libpcap for both Linux 
and FreeBSD.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


Re: [tcpdump-workers] compilation status of current (2004-09-13)

2004-09-14 Thread Rick Jones
Guy Harris wrote:
On Sep 13, 2004, at 7:24 PM, rick jones wrote:
thanks.  the end goal is to look at NFS over TCP traffic where the 
traffic may have nfs messages split across segments, several in a 
segment, that sort of thing.

If "look at" implies "dissect as NFS", Ethereal or Tethereal might be 
the way to go (they can reassemble NFS-over-TCP if you turn on the right 
preferences - and can also reassemble fragmented IP datagrams for 
NFS-over-UDP), and they also handle multiple messages in a segment.
Bonus :) That is what I was seeking.
thanks,
rick
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.