Re: [tcpdump-workers] Modular arithmetic

2012-09-05 Thread Guy Harris

On Sep 5, 2012, at 2:39 PM, George Bakos wrote:

> I don't see any discussion regarding adding modular operations to
> pcap, i.e. "header[offset:width] % 4 != 0". I've put together a patch
> that compiles & honors that (at least on the few systems I've tried),

Does it work if the right-hand side of the % operator isn't a constant power of 
2 (e.g., by dividing the LHS by the RHS, multiplying the result by the RHS, and 
subtracting the result from the LHS)?
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


[tcpdump-workers] Modular arithmetic

2012-09-05 Thread George Bakos
I don't see any discussion regarding adding modular operations to
pcap, i.e. "header[offset:width] % 4 != 0". I've put together a patch
that compiles & honors that (at least on the few systems I've tried),
but was wondering if there were any fundamental reason to avoid it?

Thanks.
g
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Re: [tcpdump-workers] hello

2012-09-05 Thread George Bakos
Lovgate worm.

On Wed, 5 Sep 2012 17:07:01 +0800
rene.p...@ftw.at wrote:

> Mail  failed.  For further assistance, please contact!
> 


-- 
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Re: [tcpdump-workers] Multifile patch

2012-09-05 Thread David Laight
> > On windows you can't pass 'FILE *' into shared libraries,
> > they are likely to have their own copies of the stdio
> > libraries - with different FILE structures.
> > (eg if one part is compiled with debug enabled).
> 
> In this patch, the library into which VFile is being passed is called
> "the C library", i.e., with the patch, we're not passing it to
> libpcap/WinPcap, we're passing it to fgets(); if you couldn't pass a
> FILE * to, say, fgets(), the stdio libraries would be completely
> useless.

Did I miss that this is a tcpdump change, not a pcap one :-(

David



___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers