[netsniff-ng] Re: [PATCH 1/3] flowtop: Show flow time duration

2015-09-03 Thread vkochan
On Thu, Sep 03, 2015 at 04:36:18PM +0200, Tobias Klauser wrote: > On 2015-09-02 at 01:31:16 +0200, Vadim Kochan wrote: > > From: Vadim Kochan > > > > Show human readable time since flow was created by Linux > > > > Signed-off-by: Vadim Kochan > > --- > > flowtop.c | 38 +++

Re: [netsniff-ng] netlink

2015-10-15 Thread vkochan
On Wed, Oct 14, 2015 at 09:17:15PM -0400, Geoff Ladwig wrote: > Hi, > > I downloaded, built the latest git master. > > I can now decode netlink message (great!) but only get the header. > > I imagine this is because not all messages are fully decoded. Is it possible > to get both the decoded hea

Re: [netsniff-ng] netlink

2015-10-15 Thread vkochan
eems to > > be one or the other. > > Thanks again > > > > nlsniff-ng -dev nlmon0 > > > > > > Nlsniff-ng -dev nlmon0 --hex > > > > > > > > -Original Message- > From: vkochan [mailto:vadi...@gmail.com] > Sent: Th

Re: [netsniff-ng] netlink

2015-10-19 Thread vkochan
On Mon, Oct 19, 2015 at 12:36:42PM +0200, Tobias Klauser wrote: > On 2015-10-15 at 16:14:09 +0200, Geoff Ladwig > wrote: > > Vadim, > > > > Thanks for responding. > > > > I have never found much use for the ASCII output... but would be happy > > either way. > > > > Possibly a --headers options

[netsniff-ng] Re: [RFC] flowtop: Show flow rate of bytes & pkts

2015-10-22 Thread vkochan
On Thu, Oct 22, 2015 at 10:03:58AM +0200, Tobias Klauser wrote: > On 2015-10-20 at 19:46:07 +0200, Vadim Kochan wrote: > > Calculate & print the rate of src/dst bytes & pkts. > > Also changed refresh flows time to 1s so the rate > > info will be not disappeared very soon. > > Looks good to me in

[netsniff-ng] Re: [PATCH 4/5] flowtop: Lookup process by dst port too

2015-10-26 Thread vkochan
On Mon, Oct 26, 2015 at 01:38:41PM +0100, Tobias Klauser wrote: > On 2015-10-24 at 16:38:10 +0200, Vadim Kochan wrote: > > From: Vadim Kochan > > > > Perform lookup inode by dst port too if remote traffic represented as > > src flow, so in case if lookup by src port failed then choose > > inode

[netsniff-ng] Re: [PATCH 3/5] flowtop: Fix src hostname with garbage

2015-10-26 Thread vkochan
On Mon, Oct 26, 2015 at 01:33:11PM +0100, Tobias Klauser wrote: > On 2015-10-24 at 16:38:09 +0200, Vadim Kochan wrote: > > From: Vadim Kochan > > > > Add missing reset for src hostname buffer. > > > > Signed-off-by: Vadim Kochan > > --- > > flowtop.c | 4 +++- > > 1 file changed, 3 insertions

[netsniff-ng] Re: [PATCH 3/5] flowtop: Fix src hostname with garbage

2015-10-26 Thread vkochan
On Mon, Oct 26, 2015 at 03:20:59PM +0100, Tobias Klauser wrote: > On 2015-10-26 at 15:07:31 +0100, vkochan wrote: > > On Mon, Oct 26, 2015 at 01:33:11PM +0100, Tobias Klauser wrote: > > > On 2015-10-24 at 16:38:09 +0200, Vadim Kochan wrote: > > > > From: Vadi

[netsniff-ng] Re: [PATCH 4/5] flowtop: Lookup process by dst port too

2015-10-26 Thread vkochan
On Mon, Oct 26, 2015 at 03:26:59PM +0100, Tobias Klauser wrote: > On 2015-10-26 at 14:16:09 +0100, vkochan wrote: > > On Mon, Oct 26, 2015 at 01:38:41PM +0100, Tobias Klauser wrote: > > > On 2015-10-24 at 16:38:10 +0200, Vadim Kochan wrote: > > > > From: Vadim Ko

[netsniff-ng] Re: [PATCH 1/5] flowtop: Fix src hostname showed with garbage

2015-10-27 Thread vkochan
On Tue, Oct 27, 2015 at 10:51:26AM +0100, Tobias Klauser wrote: > On 2015-10-27 at 01:00:47 +0100, Vadim Kochan wrote: > > Use strlcpy for copy resolved src/dst hostname. > > > > Signed-off-by: Vadim Kochan > > --- > > flowtop.c | 9 +++-- > > 1 file changed, 3 insertions(+), 6 deletions(-)

[netsniff-ng] Re: [PATCH 4/5] flowtop: Show rate in bits by default but in bytes optionaly

2015-10-27 Thread vkochan
On Tue, Oct 27, 2015 at 11:48:48AM +0100, Tobias Klauser wrote: > On 2015-10-27 at 01:00:50 +0100, Vadim Kochan wrote: > > Show rate in bits, but allow to show in bytes by -B,--rate-bytes option. > > I think it should be the other way around, i.e. the default mode shows the > rate in bytes and yo

[netsniff-ng] Re: [PATCH 5/5] flowtop: Use bool for show_src option

2015-10-27 Thread vkochan
On Tue, Oct 27, 2015 at 12:08:03PM +0100, Tobias Klauser wrote: > On 2015-10-27 at 01:00:51 +0100, Vadim Kochan wrote: > > Use boolean false/true for show_src option value. > > > > Signed-off-by: Vadim Kochan > > Sorry, I applied this with the wrong author as I didn't properly amend > :( No pr

[netsniff-ng] Re: [PATCH] flowtop: Fix missing --no-geoip option in usage output

2015-10-29 Thread vkochan
On Thu, Oct 29, 2015 at 09:27:20AM +0100, Tobias Klauser wrote: > On 2015-10-29 at 05:08:24 +0100, Vadim Kochan wrote: > > Add G,--no-geoip to the usage output. > > > > Signed-off-by: Vadim Kochan > > Sorry, must have missed it when amending the patch. Thanks a lot for > spotting! No problem,

[netsniff-ng]

2015-11-05 Thread vkochan
vadi...@gmail.com Bcc: Subject: Re: [PATCH 1/6] flowtop: Make flow_list a double linked-list Reply-To: In-Reply-To: <20151104160948.ga18...@distanz.ch> On Wed, Nov 04, 2015 at 05:09:48PM +0100, Tobias Klauser wrote: > On 2015-11-03 at 19:06:47 +0100, Vadim Kochan wrote: > > Added 'prev' field t

[netsniff-ng] Re: [PATCH 2/2] trafgen: Allow to build packet from command line

2015-11-09 Thread vkochan
On Sat, Nov 07, 2015 at 04:55:16PM +0200, Vadim Kochan wrote: > Craft packet direct from command line with same syntax as for conf file. > It might be as first step to extend current syntax with specific proto fields. > > Signed-off-by: Vadim Kochan > --- > trafgen.8| 8 ++-- > traf

Re: [netsniff-ng] Re: [PATCH 2/2] trafgen: Allow to build packet from command line

2015-11-09 Thread vkochan
On Mon, Nov 09, 2015 at 12:47:01PM +0100, Daniel Borkmann wrote: > On 11/09/2015 12:26 PM, vkochan wrote: > ... > >If you conceptually agree with this idea, I probably may re-work series > >and add separate '-p, --pkt' option for the specify packet language from >

[netsniff-ng] Re: [PATCH 2/2] flowtop: Add runtime commands to show TCP/UDP/DCCP/ICMP/SCTP

2015-11-16 Thread vkochan
On Mon, Nov 16, 2015 at 09:23:49AM +0100, Tobias Klauser wrote: > On 2015-11-12 at 07:54:19 +0100, Vadim Kochan wrote: > > Now it is possible toggle display TCP/UDP/DCCP/ICMP/SCTP protos > > by the same char keys as short command line options - T/U/D/I/S. > > > > Signed-off-by: Vadim Kochan > >

[netsniff-ng] Re: About next release date

2015-11-16 Thread vkochan
On Fri, Oct 30, 2015 at 11:17:21AM +0100, Tobias Klauser wrote: > Hi Vadim > > On 2015-10-30 at 09:59:46 +0100, Vadim Kochan wrote: > > I'd like to know when you plan to do the next release, actually > > I have some plans regarding flowtop which I think might be good to have in > > the next relea

[netsniff-ng] bpfc cpp defines passing

2015-11-16 Thread vkochan
Hi, Before start coding I'd like to know what do you think about such bpfc feature like - passing =...= to bpfc which will be converted to cpp as -Dvar1=value1..-DvarN=valueN, and in bpf filter it allows to do #ifdef for specific define and generate bpf opcodes considering this defined value (e.g.

Re: [netsniff-ng] bpfc cpp defines passing

2015-11-16 Thread vkochan
On Mon, Nov 16, 2015 at 02:13:04PM +0100, Daniel Borkmann wrote: > On 11/16/2015 02:00 PM, vkochan wrote: > >Hi, > > > >Before start coding I'd like to know what do you think about such bpfc > >feature like - passing =...= to bpfc which will > >be converted

Re: [netsniff-ng] Trafgen ICMP problem

2015-11-25 Thread vkochan
On Wed, Nov 25, 2015 at 02:51:31AM -0800, Peter Halaška wrote: > Hello, > > I'm having some problems with trafgen. > When I try to send an echo request packet to my localhost, I see it without > any problems, but there is no *echo reply *(see attached screen). > I'm using cfg file which I found h

Re: [netsniff-ng] Trafgen ICMP problem

2015-11-25 Thread vkochan
On Wed, Nov 25, 2015 at 01:03:07PM +0200, vkochan wrote: > On Wed, Nov 25, 2015 at 02:51:31AM -0800, Peter Halaška wrote: > > Hello, > > > > I'm having some problems with trafgen. > > When I try to send an echo request packet to my localhost, I see it without &

Re: [netsniff-ng] Trafgen ICMP problem

2015-11-25 Thread vkochan
On Wed, Nov 25, 2015 at 01:03:07PM +0200, vkochan wrote: > On Wed, Nov 25, 2015 at 02:51:31AM -0800, Peter Halaška wrote: > > Hello, > > > > I'm having some problems with trafgen. > > When I try to send an echo request packet to my localhost, I see it without &

Re: [netsniff-ng] Trafgen ICMP problem

2015-11-25 Thread vkochan
shows Ethernet > FCS incorrect. So which value should I change? > > Thanks! > > Peter > > Dňa streda, 25. novembra 2015 12:42:22 UTC+1 Vadim Kochan napísal(-a): > > > > On Wed, Nov 25, 2015 at 01:03:07PM +0200, vkochan wrote: > > > On Wed, Nov 25, 2015

[netsniff-ng] Re: [PATCH v4 1/6] proc: Add function to execute process with argv list

2015-12-16 Thread vkochan
Hi, On Wed, Dec 16, 2015 at 09:34:28AM +0100, Tobias Klauser wrote: > On 2015-12-15 at 22:09:10 +0100, Vadim Kochan wrote: > > Add proc_exec function which executes given process with > > argv list via fork + execvp. > > > > It allows to replace 'system' call approach which is used > > for invok