[tcpdump-workers] libpcap and a proxy server

2005-11-09 Thread Vossie
Hi again I have discovered the following problem. On the campus network I must go through a proxy server to go to the internet. Thus I have discovered the following: pcap is unable to capture the packets that go through the proxy server. Any ideas on how to fix this? I must go through the proxy

Re: [tcpdump-workers] libpcap and a proxy server

2005-11-09 Thread Vossie
I have sorted this problem out. I have bypass the proxy server and use a firewall authentication agent. Vossie - Original Message - From: "Vossie" <[EMAIL PROTECTED]> To: Sent: Wednesday, November 09, 2005 11:30 AM Subject: [tcpdump-workers] libpcap and a proxy server Hi again I have

[tcpdump-workers] Libpcap compile

2005-11-09 Thread Vossie
Hi What is the syntax as input to pcap_compile to only capture HTTP packages and not the TCP ACK's? Thanks in advance- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Libpcap compile

2005-11-09 Thread Vossie
Sorry guys. I was typing too fast. I mean HTTP packets (that transfer the data) and not the TCP ACK's :-) - Original Message - From: "Vossie" <[EMAIL PROTECTED]> To: Sent: Wednesday, November 09, 2005 2:15 PM Subject: [tcpdump-workers] Libpcap compile Hi What is the syntax as input to

Re: [tcpdump-workers] [PATCH] small cross-compile fix

2005-11-09 Thread David Smith
Guy, have you had any chance to look at this again? On Thu, 2005-09-22 at 09:42 -0500, David Smith wrote: > On Wed, 2005-09-21 at 21:27, Guy Harris wrote: > > On Sep 21, 2005, at 2:13 PM, David Smith wrote: > > > > > OK, here's a cleaner solution. It does this the "right" way using a > > > cache

Re: [tcpdump-workers] Arch dependent ar and ld

2005-11-09 Thread David Smith
On Tue, 2005-11-08 at 18:49 -0800, Guy Harris wrote: > On Nov 4, 2005, at 3:11 AM, Karl-Johan Perntz wrote: > > > When I cross compiled libpcap and tcpdump for the CRIS architecture I > > had to make libpcap aware of architecture dependent ar and ld. The > > diff > > below adds the option to spe

Re: [tcpdump-workers] Libpcap compile

2005-11-09 Thread Rick Jones
Vossie wrote: Sorry guys. I was typing too fast. I mean HTTP packets (that transfer the data) and not the TCP ACK's :-) Looking at a stream of HTTP carried in TCP segments without looking at the ACKs seems a bit odd, but if you really don't want to see the bare ACKs, you could probably filter

[tcpdump-workers] segfault on fedora core 4

2005-11-09 Thread Louis-Michel Gelinas
Hi, I ran into an issue using libpcap and tcpdump. Whenever I enter a filter tcpdump segfaults: i.e.: works fine : #tcpdump segfault #tcpdump port 80 tcpdump included with fc4 works fine (tcpdump version 3.8 libpcap version 0.8.3 ) However, I tried compiling libpcap 0.8.3 0.9.4 -curre

Re: [tcpdump-workers] more advanced feature of libpcap?

2005-11-09 Thread Guy Harris
On Nov 9, 2005, at 12:20 AM, Vossie wrote: Ok in terms of the feature that I wanted to use... Is there a command that libpcap can use to detect lost packets? To quote my earlier message: "See packet lost" in what sense? The only types of lost packet libpcap can report on - and it can on

Re: [tcpdump-workers] Libpcap compile

2005-11-09 Thread Guy Harris
On Nov 9, 2005, at 9:59 AM, Rick Jones wrote: Vossie wrote: Sorry guys. I was typing too fast. I mean HTTP packets (that transfer the data) and not the TCP ACK's :-) Looking at a stream of HTTP carried in TCP segments without looking at the ACKs seems a bit odd, but if you really don't w

Re: [tcpdump-workers] changes to scanner.l for HP-UX 11.11 lex

2005-11-09 Thread Rick Jones
Guy Harris wrote: On Nov 7, 2005, at 1:08 PM, Rick Jones wrote: The following change bumps a few limits in scanner.l so it will be processed by the lex which ships with HP-UX. It is based on libpcap-2005.10.09. While I was here, I went through to make sure that utilization of these things

Re: [tcpdump-workers] changes to scanner.l for HP-UX 11.11 lex

2005-11-09 Thread Rick Jones
Shouldn't that have then appeared in the 11/09 "current" tar? I just grabbed that and it doesn't seem to have been there. Operator error on my part? Grabbing the wrong tar file or something? Part of it might be that there is no 11/09 tar - the last "current" appears to be 10/09 rick - This

[tcpdump-workers] compilation warnings from HP-UX 11.23 IA64 (32-bit compile)

2005-11-09 Thread Rick Jones
For fun and excitement :) I tried compiling the 10.09 bits on an IA64 HP-UX 11.23 system. I'm not _entirely_ certain of the lineage of the compiler I'm using, having gotten it from an internal depot, but it did emit some warnings that may or may not be meaningful: the first batch look mostly

Re: [tcpdump-workers] changes to scanner.l for HP-UX 11.11 lex

2005-11-09 Thread Guy Harris
On Nov 9, 2005, at 2:53 PM, Rick Jones wrote: Shouldn't that have then appeared in the 11/09 "current" tar? I just grabbed that and it doesn't seem to have been there. Operator error on my part? Grabbing the wrong tar file or something? It was checked in, but perhaps the tarball was crea

Re: [tcpdump-workers] changes to scanner.l for HP-UX 11.11 lex

2005-11-09 Thread Rick Jones
Guy Harris wrote: On Nov 9, 2005, at 2:53 PM, Rick Jones wrote: Shouldn't that have then appeared in the 11/09 "current" tar? I just grabbed that and it doesn't seem to have been there. Operator error on my part? Grabbing the wrong tar file or something? It was checked in, but perhaps

Re: [tcpdump-workers] compilation warnings from HP-UX 11.23 IA64 (32-bit compile)

2005-11-09 Thread Guy Harris
On Nov 9, 2005, at 3:17 PM, Rick Jones wrote: For fun and excitement :) I tried compiling the 10.09 bits on an IA64 HP-UX 11.23 system. I'm not _entirely_ certain of the lineage of the compiler I'm using, having gotten it from an internal depot, but it did emit some warnings that may or m