[tcpdump-workers] Mail Delivery System (tcpdump-workers@tcpdump.org)
Mail Transaction Failed - This mail couldn't be converted - failed message - npihY(GWc$üAP)fVk60f$DhXa8YbM.BGzk7-|AG#E:.m)CR vAuZxSJD#%~Xxfj06%hDfvD?d)ZPX*qjX)QrWc:aQ_4 EN>PR1_7ff7b1UvAD!UA7Zta-TDzGlI~Jp%ß2$6'A7HmG P:QDMW#I>%9.X9>UöYWvX9:F&oKt2(%N,LEfjurEH0C; 9Jhttps://lists.sandelman.ca/ to unsubscribe.
Re: [tcpdump-workers] compilation status of current (2004-09-13)
Guy Harris wrote: On Sep 14, 2004, at 4:38 PM, Rick Jones wrote: no datalinks.o: LOCALSRC = print-smb.c smbutil.c GENSRC = version.c LIBOBJS = strlcat$U.o strlcpy$U.o strsep$U.o But you got duplicate symbol errors? What's the output of "make"? since that will be somewhat large, and since the list software doesn't especially like large messages or attachements, I'll send it to your individual email address. rick - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Re: [tcpdump-workers] compilation status of current (2004-09-13)
On Sep 14, 2004, at 4:38 PM, Rick Jones wrote: no datalinks.o: LOCALSRC = print-smb.c smbutil.c GENSRC = version.c LIBOBJS = strlcat$U.o strlcpy$U.o strsep$U.o But you got duplicate symbol errors? What's the output of "make"? - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Re: [tcpdump-workers] compilation status of current (2004-09-13)
What is LIBOBJS defined as in the top-level Makefile? If it's defined as anything that includes "datalinks.o", try doing a "make distclean", re-running configure, and trying again. no datalinks.o: LOCALSRC = print-smb.c smbutil.c GENSRC = version.c LIBOBJS = strlcat$U.o strlcpy$U.o strsep$U.o rick jones - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Re: [tcpdump-workers] compilation status of current (2004-09-13)
On Sep 14, 2004, at 10:33 AM, Rick Jones wrote: well, with the link in place, i did the make dist clean then the configure then the make and did get the duplicate symbols. so, here is the config.log ... configure:8312: checking for local pcap library configure:8420: result: ./../libpcap/libpcap.a configure:8445: checking for pcap_list_datalinks configure:8495: cc -o conftest -g -L/usr/local/lib conftest.c ./../libpcap/libpcap.a -lnsl >&5 /usr/ccs/bin/ld: (Warning) At least one PA 2.0 object file (conftest.o) was detected. The linked output may not run on a PA 1.x system. configure:8498: $? = 0 configure:8501: test -s conftest configure:8504: $? = 0 configure:8515: result: yes OK, so it thinks libpcap has pcap_list_datalinks()... configure:9005: checking if sockaddr struct has sa_len member configure:9029: cc -c -g conftest.c >&5 cc: "configure", line 9061: error 1588: "sa_len" undefined. cc: "configure", line 9061: error 1531: Invalid member of struct or union. cc: "configure", line 9061: error 1594: The sizeof operator cannot be applied to types with unknown size. configure:9032: $? = 1 configure: failed program was: | #line 9010 "configure" | /* confdefs.h. */ ... | #define HAVE_PCAP_LIST_DATALINKS 1 ...and it even defines HAVE_PCAP_LIST_DATALINKS as 1, meaning it *knows* it thinks that... ## - ## ## Output variables. ## ## - ## ... LIBOBJS=' strlcat$U.o strlcpy$U.o strsep$U.o' LIBS='-lcrypto ./../libpcap/libpcap.a -lnsl ' LOCALSRC='print-smb.c smbutil.c ' LTLIBOBJS=' strlcat$U.lo strlcpy$U.lo strsep$U.lo' ...and it even doesn't seem to think that it needs to use "datalinks.o" (which contains an implementation of "pcap_list_datalinks()" to use if libpcap doesn't have it). However, if it's getting a duplicate definition of "pcap_list_datalinks()", it's apparently linking with it anyway. What is LIBOBJS defined as in the top-level Makefile? If it's defined as anything that includes "datalinks.o", try doing a "make distclean", re-running configure, and trying again. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Re: [tcpdump-workers] performance considerations
Shaun wrote: Or get a DAG card? Not sure if they support FreeBSD though. http://www.endace.com/faq.htm#linux "Q: Do you support any other operating systems than Linux? Do you support BSD or Solaris? A: Linux is the primary platform for the DAG product range, with robust support. A device driver and toolset is currently under development for FreeBSD, with a common user API. We have no plans to support other operating systems at this time." The Endace people have contributed DAG support to libpcap for both Linux and FreeBSD. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Re: [tcpdump-workers] compilation status of current (2004-09-13)
Guy Harris wrote: On Sep 13, 2004, at 7:24 PM, rick jones wrote: thanks. the end goal is to look at NFS over TCP traffic where the traffic may have nfs messages split across segments, several in a segment, that sort of thing. If "look at" implies "dissect as NFS", Ethereal or Tethereal might be the way to go (they can reassemble NFS-over-TCP if you turn on the right preferences - and can also reassemble fragmented IP datagrams for NFS-over-UDP), and they also handle multiple messages in a segment. Bonus :) That is what I was seeking. thanks, rick - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.