Re: [tcpdump-workers] why the ethernet and ip header of packets, which are captured by libpcap function, are distorted

2013-03-18 Thread Wesley Shields
On Fri, Mar 15, 2013 at 06:37:25PM -0700, Guy Harris wrote: > > On Mar 15, 2013, at 2:45 PM, Michael Richardson wrote: > > > > >> "wen" == wen lui writes: > >wen> I used libpcap function pcap_next() to capture some tcp packets > >wen> I checked the bytes of the captured packets and

Re: [tcpdump-workers] Research on tcpdump

2013-03-18 Thread Michael Richardson
> "Guy" == Guy Harris writes: Guy> (Michael, have you gotten Coverity Scan set up to do either Guy> nightly or post-commit runs on libpcap and tcpdump? Guy> http://scan.coverity.com Guy> That's one way of getting the code checked. I also did a Clang Guy> Static Humilia

Re: [tcpdump-workers] Research on tcpdump

2013-03-18 Thread Guy Harris
On Mar 18, 2013, at 11:13 AM, Michael Richardson wrote: > >> "Raymond" == Raymond Borges writes: >Raymond> Specifically we are studying how versions fixed >Raymond> vulnerabilities by diffing the code functions where the CVE >Raymond> states the vulnerability was. We're also wo

Re: [tcpdump-workers] Research on tcpdump

2013-03-18 Thread Michael Richardson
> "Raymond" == Raymond Borges writes: Raymond> Specifically we are studying how versions fixed Raymond> vulnerabilities by diffing the code functions where the CVE Raymond> states the vulnerability was. We're also wondering why Raymond> there are no listed CVEs after 2007 for

Re: [tcpdump-workers] Couldn't parse filter scr port 22000: syntax error

2013-03-18 Thread Denis Ovsienko
>    it output an error: Couldn't parse filter scr port 22000: syntax error "scr port 22000" (mind the typo) -- Denis Ovsienko ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-wo

[tcpdump-workers] Couldn't parse filter scr port 22000: syntax error

2013-03-18 Thread wen lui
Hi, all I used the following filter rules to capture packets, tcpdump -i eth0 src port 22000 it works fine, however, when I used it libpcap functions pcap_compile() and pcap_setfilter() it output an error: Couldn't parse filter scr port 22000: syntax error what is wrong