Re: [tcpdump-workers] tcpdump 3.9.1 under Windows

2005-07-06 Thread Guy Harris
Speaking of x.9 changes, if we're going to be doing x.9.2 soon to fix various problems, should I also make pcap_fopen_offline(), pcap_file(), pcap_fileno(), pcap_dump_fopen(), and pcap_dump_file() UN*X-only, as per the discussions about the issues with different flavors of MSVC++'s C libraries

Re: [tcpdump-workers] detecting libpcap 0.9

2005-07-06 Thread Guy Harris
Michael Richardson wrote: If it happens this week, I'm fine with that. OK, I'll check those changes in again this week. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] tcpdump 3.9.1 under Windows

2005-07-06 Thread Loris Degioanni
Michael Richardson wrote: -BEGIN PGP SIGNED MESSAGE- "Loris" == Loris Degioanni <[EMAIL PROTECTED]> writes: Loris> There is an issue compiling 3.9.1 in Windows. The problem is Loris> that my last patch to win32\prj\windump.dsp (2005/6/4) was Loris> not propagated to the

Re: [tcpdump-workers] pcap_dump error checking

2005-07-06 Thread Guy Harris
Mark Ellzey Thomas wrote: Recently I have been wanting for pcap_dump to make me aware of any issues with writing to a file (a full disk). Are there any issues with changing pcap_dump from void to size_t? It changes the ABI of the function, requiring a major version number change to libpcap.

Re: [tcpdump-workers] tcpdump 3.9.1 under Windows

2005-07-06 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- > "Loris" == Loris Degioanni <[EMAIL PROTECTED]> writes: Loris> There is an issue compiling 3.9.1 in Windows. The problem is Loris> that my last patch to win32\prj\windump.dsp (2005/6/4) was Loris> not propagated to the tcpdump_3_9 branch, and th

Re: [tcpdump-workers] detecting libpcap 0.9

2005-07-06 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- > "Romain" == Romain Francoise <[EMAIL PROTECTED]> writes: >> Unfortunately, that happened after the 0.9/3.9 release, so, for >> better or worse, we're stuck with the old names; I've backed out >> the aforementioned change. Romain> It's not

Re: [tcpdump-workers] 3.9.1 -A flag broken

2005-07-06 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- > "Guy" == Guy Harris <[EMAIL PROTECTED]> writes: Guy> I guess that explains why *neither* of my messages had the Guy> patch. Guy> OK, it's at Guy> http://www.sonic.net/~gharris/patch The list filters out non-text/plain mime types.

Re: [tcpdump-workers] 3.9.1 -A flag broken

2005-07-06 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- > "dean" == dean gaudet <[EMAIL PROTECTED]> writes: dean> heheh cool, you seem to have come to the same conclusions as dean> me... and i've got a regression test at dean> http://arctic.org/~dean/patches/tcpdump-3.9.1-test-print-flags.patch I c

Re: [tcpdump-workers] 3.9.1

2005-07-06 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- > "Romain" == Romain Francoise <[EMAIL PROTECTED]> writes: Romain> The CHANGES file in libpcap-0.9.1.tar.gz is... strange: Romain> Looks like the entry got mangled. Yeah, I merged my start the file with Ken's work. Oops. Fixed in CVS. - --

[tcpdump-workers] pcap_dump error checking

2005-07-06 Thread Mark Ellzey Thomas
Hello all, Recently I have been wanting for pcap_dump to make me aware of any issues with writing to a file (a full disk). Are there any issues with changing pcap_dump from void to size_t? Here is a small patch that includes error checking on pcap_dump and returns the output of fwrite().

Re: [tcpdump-workers] 3.9.1

2005-07-06 Thread Guy Harris
Romain Francoise wrote: The CHANGES file in libpcap-0.9.1.tar.gz is... strange: ... Looks like the entry got mangled. The main branch doesn't have the mangled entry for May 27th, and is otherwise identical (other than the RCS header). - This is the tcpdump-workers list. Visit http

Re: [tcpdump-workers] 3.9.1

2005-07-06 Thread Romain Francoise
The CHANGES file in libpcap-0.9.1.tar.gz is... strange: | @(#) $Header: /tcpdump/master/libpcap/CHANGES,v 1.59.2.1 2005/07/05 21:04:27 mcr Exp $ (LBL) | | Tue. July 5, 2005. [EMAIL PROTECTED] Summary for 3.9.x tcpdump | | Fixes for compiling on nearly every platform, | inc

Re: [tcpdump-workers] [Libpcap] Endianess and memory alignment

2005-07-06 Thread Guy Harris
Cyril wrote: Ok. My computer is a G4 iBook. Running what OS? (Yes, that's a serious question. The default OS is a system with BPF, so the packet data's network-layer header should be aligned on a 4-byte boundary - and, at least for Ethernet and 802.11, the link-layer header is fixed-lengt

Re: [tcpdump-workers] [Libpcap] Endianess and memory alignment

2005-07-06 Thread Cyril
Hello, Guy : That only applies to live captures on systems with BPF; it doesn't apply, for example, on Linux (even though Linux's socket filters implement the same filter language as the BSD BPF code does), or Windows (even though WinPcap implements that filter language) or other platforms

[tcpdump-workers] Automatic report from sources (tcpdump libpcap htdocs) between 05.07.2005 - 06.07.2005 GMT

2005-07-06 Thread Automatic cvs log generator /tcpdump/bin/makelog
CVS log entries from 05.07.2005 (Tue) 09:07:14 - 06.07.2005 (Wed) 09:06:53 GMT = Summary by authors = Author: guy File: libpcap/pcap.3; Revisions: 1.70, 1.69, 1.64.2.6, 1.64.2.5 F

[tcpdump-workers] tcpdump non stop decode. How?

2005-07-06 Thread Tsarev Alexey
Hello I use linux and have a problem. When i run tcpdump: tcpdump -i eth0 and do service network restart tcpdump exit: tcpdump: pcap_loop: recvfrom: Network is down 64 packets captured 128 packets received by filter 0 packets dropped by kernel But if I run tcpdump: tcpdump -i any t