Re: [tcpdump-workers] timestamp in pcap/tcpdump

2012-11-26 Thread Cheng Cheng
Hi Guy, Then I have another question regarding timestamp in pcap. In order to get the accurate receiving timestamp of a packet on the NIC device not supporting hardware timestamping, can I modify the NIC device driver code to update skb_shared_hwtstamp struct by using TSC in RX routine? Will pca

Re: [tcpdump-workers] [PATCH] Decode DHCPv6 AFTR-Name option (RFC6334)

2012-11-26 Thread Denis Ovsienko
18.11.2012, 20:05, "François-Xavier Le Bail" : > Hello, > > Please find the patch version 2 as an attachment. Neither version made it to the list. Do you have this change published as a git commit? The original tcpdump repository is here: https://github.com/mcr/tcpdump -- Denis Ovsienko ___

[tcpdump-workers] Configure error report - tcpdump

2012-11-26 Thread Jaylen VanOrden
Attached config.log ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

[tcpdump-workers] Request for DLT

2012-11-26 Thread Michael Tuexen
Hi Guy, could you register a DLT for SCTP? It would be similar to LINKTYPE_IPV4 / DLT_IPV4 or LINKTYPE_IPV6 / DLT_IPV6, just covering the SCTP packet without any lower layer. Suggested name: LINKTYPE_SCTP / DLT_SCTP. Please let me know if you have any further questions. Thanks a lot for your hel

Re: [tcpdump-workers] Request for DLT

2012-11-26 Thread Michael Tuexen
On Nov 24, 2012, at 7:34 PM, Guy Harris wrote: > > On Nov 24, 2012, at 6:09 AM, Michael Tuexen > wrote: > >> could you register a DLT for SCTP? It would be similar to >> LINKTYPE_IPV4 / DLT_IPV4 or LINKTYPE_IPV6 / DLT_IPV6, >> just covering the SCTP packet without any lower layer. > > No IPv4

Re: [tcpdump-workers] [PATCH] Decode DHCPv6 AFTR-Name option (RFC6334)

2012-11-26 Thread François-Xavier Le Bail
Hello, Yes commit 24c8ca364f46fba30e88b239a33415e731123cd0 in https://github.com/mcr/tcpdump (Nov 20, 2012). Francois-Xavier - Original Message - > From: Denis Ovsienko > To: tcpdump-workers > Cc: > Sent: Sunday, November 18, 2012 5:51 PM > Subject: Re: [tcpdump-workers] [PATCH] De

[tcpdump-workers] "make check" fail on Debian Squeeze

2012-11-26 Thread François-Xavier Le Bail
Hello, When I do a "make check", there are 7 errors. Build on Debian Squeeze, gcc version 4.4.5 (Debian 4.4.5-8). Do I miss something ? Regards, Francois-Xavier ---

Re: [tcpdump-workers] "make check" fail on Debian Squeeze

2012-11-26 Thread Michael Richardson
> "ois-Xavier" == ois-Xavier Le Bail writes: ois-Xavier> Hello, ois-Xavier> When I do a "make check", there are 7 errors. ois-Xavier> Build on Debian Squeeze, gcc version 4.4.5 (Debian ois-Xavier> 4.4.5-8). install libssl-dev. -- ] He who is tired of Weird Al is tir

Re: [tcpdump-workers] "make check" fail on Debian Squeeze

2012-11-26 Thread François-Xavier Le Bail
It works, thank you. > > From: Michael Richardson >To: François-Xavier Le Bail >Cc: tcpdump-workers >Sent: Monday, November 26, 2012 3:27 PM >Subject: Re: [tcpdump-workers] "make check" fail on Debian Squeeze > > >> "ois-Xavier" == ois-Xavier Le Bail writ

Re: [tcpdump-workers] Configure error report - tcpdump

2012-11-26 Thread Michael Richardson
> "Jaylen" == Jaylen VanOrden writes: Jaylen> Attached config.log The list has to remove non-text attachments to keep things sane against trojans that are sending virii/trojans from legit email addresses. So, please include your config.log inline. -- ] He who is tired of Weird A

Re: [tcpdump-workers] Configure error report - tcpdump

2012-11-26 Thread Guy Harris
On Nov 26, 2012, at 7:17 AM, Michael Richardson wrote: > >> "Jaylen" == Jaylen VanOrden writes: >Jaylen> Attached config.log > > The list has to remove non-text attachments to keep things sane against > trojans that are sending virii/trojans from legit email addresses. > So, please i

Re: [tcpdump-workers] mmap consumes more CPU

2012-11-26 Thread abhinav narain
@Guy, Basically, I was adding my own header (instead of radiotap) in kernel and processing it in userland with my own code. Basically I wrote my own pcap for that. Since, I did not get the performance, Now I have added extra fields in radiotap. But I still see high CPU usage. Its interesting that y

Re: [tcpdump-workers] mmap consumes more CPU

2012-11-26 Thread Guy Harris
On Nov 26, 2012, at 12:58 PM, abhinav narain wrote: > @Guy, > Basically, I was adding my own header (instead of radiotap) in kernel and > processing it in userland with my own code. Basically I wrote my own pcap > for that. For your own radio header, what you'd need would be: your own