Re: [tcpdump-workers] libpcap timeout weirdness

2013-03-25 Thread Robert Monaghan
My current code (before using libpcap) uses this very method. I set up a raw socket, set the DEMUX type, and I capture traffic. The problem with this approach is that it seems to have a fair bit of overhead in the OS. (At least on the Mac.) I have to throttle traffic down my hardware to about

[tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Tomasz Moń
Hello, For the USBPcap project I would like to request a new link-layer header type value: LINKTYPE_USBPCAP DLT_USBPCAP Capture format specification is available at the project website [1] and could be described as pseudo-header for USB packets captured using USBPcap on Microsoft Windows.

Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 2:48 AM, Tomasz Moń deso...@gmail.com wrote: For the USBPcap project I would like to request a new link-layer header type value: LINKTYPE_USBPCAP DLT_USBPCAP Capture format specification is available at the project website [1] and could be described as pseudo-header

[tcpdump-workers] Is user question allowed here?

2013-03-25 Thread ishare
is question about use of tcpdump allowed in this list? I am running linux in vmware and use tcpdump to capture all tcp packets send/receive by its virtual net card,the server and client are running at the same host . But ,after client send/receive several packets to/from server

Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Tomasz Moń
On Mon, Mar 25, 2013 at 11:08 AM, Guy Harris g...@alum.mit.edu wrote: #pragma pack(1) typedef struct { USHORT headerLen; /* This header length */ UINT64 irpId; /* I/O Request packet ID */ So headerLen is at an offset of 0, and irpId is at an offset of 2, right?

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Guy Harris
On Mar 24, 2013, at 2:52 PM, Michael Richardson m...@sandelman.ca wrote: Romain In any case the rc2 tarballs are nowhere to be found. Can we Romain get an update, please? http://www.ca.tcpdump.org/beta/ 1.4.0rc2 looks good, although I just checked into the trunk, and propagated to

[tcpdump-workers] libpcap: 64bit machine has no compatible 32-bit libpcap library

2013-03-25 Thread wen lui
I want to compile a `.c` file to 32-bit executable using `gcc` option `-m32` with libpcap the machine is linux 64bit fedora 16 however, I get the following error [root@fdf source]# gcc -m32 -o test_tcp test_tcp.c -lpcap /usr/bin/ld: skipping incompatible /usr/lib64/libpcap.so when

Re: [tcpdump-workers] Is user question allowed here?

2013-03-25 Thread Michael Richardson
ishare == ishare june.tune@gmail.com writes: ishare But ,after client send/receive several packets to/from ishare server ,only to find 0 packet have been captured by tcpdump. ishare My command is : tcpdump tcp you didn't use the -w option.

Re: [tcpdump-workers] libpcap: 64bit machine has no compatible 32-bit libpcap library

2013-03-25 Thread Michael Richardson
wen == wen lui esolvepol...@gmail.com writes: wen I want to compile a `.c` file to 32-bit executable using `gcc` wen option `-m32` with libpcap the machine is linux 64bit fedora 16 wen how to solve this problem? thanks! install a 32-bit libpcap. I don't know how to do this on

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Denis Ovsienko
4.4.0rc2 appears to have stuff that's in the trunk but not the tcpdump_4_4rel0 branch, such as print-msnlb.c, print-vxlan.c, and print-otv.c, a change to print-bgp.c, and a change to the Makefile not to have an explicit list of tests but to run a find command to find the tests.   Is that

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Wesley Shields
On Sun, Mar 24, 2013 at 05:52:51PM -0400, Michael Richardson wrote: Romain == Romain Francoise rom...@orebokech.com writes: please expect a new release candidate on 2013-03-09, assuming I can get enough Internet in St.Johns. Romain Not sure if this was St John's in Antigua

Re: [tcpdump-workers] tcpdump 4.4 release candidate 1

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 7:55 AM, Michael Richardson m...@sandelman.ca wrote: Guy 4.4.0rc2 appears to have stuff that's in the trunk but not the Guy tcpdump_4_4rel0 branch, such as print-msnlb.c, print-vxlan.c, Guy and print-otv.c, a change to print-bgp.c, and a change to the Guy

Re: [tcpdump-workers] libpcap: 64bit machine has no compatible 32-bit libpcap library

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 7:22 AM, Michael Richardson m...@sandelman.ca wrote: wen == wen lui esolvepol...@gmail.com writes: wen I want to compile a `.c` file to 32-bit executable using `gcc` wen option `-m32` with libpcap the machine is linux 64bit fedora 16 wen how to solve this