[tcpdump-workers] wireshark question...

2010-01-11 Thread Lidwa, Eric (GSFC-582.0)[SGT INC]
Sorry for posting it on tcpdump list but I got no responses from 'wireshark-dev' so I thought I would give it a try here. I have written several dissectors so far which were implemented as plugins. I am now implementing dissectors for the payload part of one of the protocols. Without going into

Re: [tcpdump-workers] Libpcap speed problem

2010-01-11 Thread Aaron Turner
2010/1/11 arif ugurel : > Hi, > I made  my code as simple as possible. Just open devices, read from one of > them and send it thru the other one and vice versa. May be the problem is > about some kind of loop. But i couldn't figured it out. > Any other ideas? Sorry, but I'm really not able to help

Re: [tcpdump-workers] Libpcap speed problem

2010-01-11 Thread arif ugurel
Hi, I made my code as simple as possible. Just open devices, read from one of them and send it thru the other one and vice versa. May be the problem is about some kind of loop. But i couldn't figured it out. Any other ideas? On Mon, Jan 11, 2010 at 10:05 PM, Aaron Turner wrote: > On Mon, Jan 11

Re: [tcpdump-workers] Libpcap speed problem

2010-01-11 Thread Aaron Turner
On Mon, Jan 11, 2010 at 12:41 AM, Arif UGUREL wrote: > Hi all, > I'm using libpcap on OpenSuse 11.1. I have 2 interfaces ie. eth0 and > eth1. I'm trying to capture packets from eth0 and send them thru eth1. > I'm doing some logging operations before sending thru eth1. I developed > a simple applic

Re: [tcpdump-workers] forces (and sctp) patch

2010-01-11 Thread sthaug
> Well, it gets in the way of all types of things, for example: > > tcpdump-v -i foo.cap | egrep pattern | wc -l > > I think the behaviour should be the reverse of the -g in Mac OS X > and that is it should be necessary to use some new command line > option to force tcpdump to insert new lines be

Re: [tcpdump-workers] [PATCH][RFC] Allow linking from custom staticlib.a instead of list of object files

2010-01-11 Thread Christian Bell
On Jan 8, 2010, at 7:22 PM, Guy Harris wrote: On Jan 8, 2010, at 12:56 PM, Guy Harris wrote: You might want to call it ARCHIVELIBS, by analogy to LIBS. Another possibility, if the routines are in an installed library, would be to just add that library to LIBS. The shared libpcap will

Re: [tcpdump-workers] nightly build package

2010-01-11 Thread Gerald Combs
Guy Harris wrote: > On Jan 10, 2010, at 12:06 PM, Michael Richardson wrote: > >> I was supposed to setup a master/manager program (it was in python, I >> think), that will farm out builds for various platforms to a volunteer >> pool. I've forgotten the name of this system, but it was the same on

Re: [tcpdump-workers] forces (and sctp) patch

2010-01-11 Thread Darren Reed
On 11/01/2010 1:29 AM, Michael Richardson wrote: ... I was initially concerned about the output with -v, as it is multiline, and I think that without -v, one packet should occupy one line. This makes postprocessing easier, and certainly makes grep easier. Maybe we need another option, "--human"..

[tcpdump-workers] [PATCH] Add Myricom SNF API support as a new pcap device.

2010-01-11 Thread Christian Bell
From: Christian Bell This patch adds support for our NICs when run in a specialized capture mode. It is diffed against the current master. The Myricom Sniffer10G software uses Myri-10G programmable Network Interface Cards (NICs), a firmware extension, a specialized driver and a user-level librar

[tcpdump-workers] Libpcap speed problem

2010-01-11 Thread Arif UGUREL
Hi all, I'm using libpcap on OpenSuse 11.1. I have 2 interfaces ie. eth0 and eth1. I'm trying to capture packets from eth0 and send them thru eth1. I'm doing some logging operations before sending thru eth1. I developed a simple application, when i deployed the box to our network, everything is fin