Re: [tcpdump-workers] print_llc code question

2009-09-01 Thread Guy Harris
On Sep 1, 2009, at 6:55 AM, Jean-Louis CHARTON wrote: Maybe the following question is pretty obvious but since I'm not an 802.2/LLC expert, I can't find a response for it. I was reading print_llc.c code and in llc_print() function, I found something that I don't really understand. At lines 247

Re: [PATCH] Re: [tcpdump-workers] Bug: Counting dropped packets in

2009-09-01 Thread Dustin Spicuzza
Stephen Donnelly wrote: > Dustin Spicuzza wrote: > >>> So after reading the libpcap and kernel source, I see that this is >>> actually how its supposed to work. But it *seems* like it would be quite >>> nice if we could grab the interface driver drop statistics as well as >>> drops resulting from

Re: [tcpdump-workers] [PATCH 1/3] Add getnameinfo support to getname

2009-09-01 Thread Miroslav Lichvar
On Sun, Aug 30, 2009 at 06:54:34PM -0700, Guy Harris wrote: > What's the advantage to using getnameinfo() rather than gethostbyaddr(). I'm not sure there are any real advantages, it's just that gethostbyaddr() is marked as obsolete on some systems. -- Miroslav Lichvar - This is the tcpdump-worke

Re: [PATCH] Re: [tcpdump-workers] Bug: Counting dropped packets in linux

2009-09-01 Thread Guy Harris
On Aug 28, 2009, at 1:24 PM, Dustin Spicuzza wrote: Dustin Spicuzza wrote: So after reading the libpcap and kernel source, I see that this is actually how its supposed to work. But it *seems* like it would be quite nice if we could grab the interface driver drop statistics as well as drops

Re: [PATCH] Re: [tcpdump-workers] Bug: Counting dropped packets in

2009-09-01 Thread Guy Harris
On Aug 30, 2009, at 8:26 PM, Stephen Donnelly wrote: The current 'drop' count in libpcap is not intuitive, and frequently arguably undercounts since it does not include 'rx buffer overflow' and similar interface/OS specific packet loss. OTOH, the documentation is quite clear about what it

[tcpdump-workers] bpf.tcpdump.org

2009-09-01 Thread Michael Richardson
Last week I moved bpf.tcpdump.org to a machine at my new employer, credil.org. Alas, IP address mgmt not what it should be, the wrong one was assigned to me. It has been fixed in DNS, and the old IP will get removed tomorrow. Nothing else has changed... I hope that everyone fails to notice thi

[tcpdump-workers] print_llc code question

2009-09-01 Thread Jean-Louis CHARTON
Hi, Maybe the following question is pretty obvious but since I'm not an 802.2/LLC expert, I can't find a response for it. I was reading print_llc.c code and in llc_print() function, I found something that I don't really understand. At lines 247 to 251, one has : if (ssap == LLCSAP_IP && dsa