Re: [tcpdump-workers] problem with parsing Leipzig-I trace

Hi Zhen, Well, 0x21 is the IANA PPP DLL protocol number for Internet Protocol version 4, so perhaps the link in question is RFC2615 PPP over SONET rather than PoS/Cisco HDLC. You could try changing DLT_CHDLC to DLT_PPP_SERIAL in dagbpf.c and recompiling. Alternatively contact NLANR PMA via t

Re: [tcpdump-workers] 0.9.2/3.9.2

No objection. Me and Gianluca still checked in a couple of fixes in the Win32 code, and from that point of view we should be ready. Loris Michael Richardson wrote: -BEGIN PGP SIGNED MESSAGE- Any objection to 0.9.2 going out in the next 20 hours? - -- ] Michael Richardson

Re: [tcpdump-workers] problem with parsing Leipzig-I trace

Yes. I tried different flags. Here is what I got by trying "dagbpf -p". - $ zcat 20021125-14-0.gz | /usr/local/dagtools-0.8.1/pcap/dagbpf -p | /usr/local/sbin/tcpdump -n -tt -r -| more reading from file -, link-type C_HDLC (Cisco HDLC) 1038229200.000249 unknown CHDLC

Re: [tcpdump-workers] mbuf leaks with tcpdump on netbsd

Pavan Mirla wrote: After I use tcpdump to set my interface to promiscuous mode I se that my mbufs are getting exhausted.I later get the errot "mlcpool reached it's limit, increase NMBCLUSTERS size. " netstat -m shows me multiple calls to protocol drain routines.I am using netBSD version 1.6. Ca

Re: [tcpdump-workers] 3.9.1 -A flag broken

On Jul 6, 2005, at 1:56 PM, Guy Harris wrote: So presumably "-X" should suppress the "print_default()" calls in link-layer printers (i.e., the if (!xflag && !qflag) print_default(...); calls). I'll look at doing that, unless somebody objects. I've done that. Should "-A" do so as

[tcpdump-workers] mbuf leaks with tcpdump on netbsd

Hi, After I use tcpdump to set my interface to promiscuous mode I se that my mbufs are getting exhausted.I later get the errot "mlcpool reached it's limit, increase NMBCLUSTERS size. " netstat -m shows me multiple calls to protocol drain routines.I am using netBSD version 1.6. Can someone suggest

[tcpdump-workers] 0.9.2/3.9.2

-BEGIN PGP SIGNED MESSAGE- Any objection to 0.9.2 going out in the next 20 hours? - -- ] Michael Richardson Xelerance Corporation, Ottawa, ON | firewalls [ ] mcr @ xelerance.com Now doing IPsec training, see |net architect[ ] http://www.sandelman.ca/mcr/www.xe

Re: [tcpdump-workers] problem with parsing Leipzig-I trace

From the web pages you mentioned, the Leipzig-I trace page says that it was taken from a Packet over SONET link. Did you try the "dagbpf -p" flag for PoS? Regards, Stephen. Zhen Wu wrote: Hello, everyone: I am using dagtools and tcpdump to parse the Leipzig-I trace. The output is NOT what I

Re: [tcpdump-workers] 3.9.1 -A flag broken

On Wed, 6 Jul 2005, Guy Harris wrote: > So presumably "-X" should suppress the "print_default()" calls in > link-layer printers (i.e., the > >if (!xflag && !qflag) > print_default(...); > > calls). I'll look at doing that, unless somebody objects. > > Should "-A" do so as well? hmm.

[tcpdump-workers] Automatic report from sources (tcpdump libpcap htdocs) between 09.07.2005 - 10.07.2005 GMT

CVS log entries from 09.07.2005 (Sat) 09:07:06 - 10.07.2005 (Sun) 09:07:03 GMT = Summary by authors = Author: risso File: tcpdump/tcpdump-stdinc.h; Revisions: 1.16, 1.12.2.4 File: