Re: [tcpdump-workers] Multiple interface listening modification

2015-06-04 Thread Michal Sekletar
On 06/04/2015 07:28 AM, Tugrul Erdogan wrote: I am using libpcap 1.7.3 version and I need to listen multiple interface by same user process call. I am planning to patch libpcap to be able to use a socket array which will be attached different interfaces. Can't you just pcap_open more

Re: [tcpdump-workers] how many stable branches to have

2015-05-26 Thread Michal Sekletar
On 05/26/2015 11:46 AM, Francois-Xavier Le Bail wrote: AFAIK, This is not the scheme used by the linux kernel. they don't have '-stable' or '-longterm' in their names as these are moving 'attributes' given on the main page of kernel.org. You are right, those really are attributes. I

Re: [tcpdump-workers] how many stable branches to have

2015-05-25 Thread Michal Sekletar
On 05/21/2015 08:16 PM, Michael Richardson wrote: I have no problem with having lts- branches created for distros, and I'd rather do that than have old stable. I'd rather call them something like: wheezy-4.7 or centos7-4.7 Clearly having CentOS branch upstream would make my life

Re: [tcpdump-workers] Work on development

2015-05-11 Thread Michal Sekletar
On 05/08/2015 06:53 PM, Jesse Johnson wrote: I would like to put some effort into the code base. Much appreciated. What are we using to edit the code and submit changes? Any special rules for submitting changes? To work on tcpdump/libpcap you don't need any specialized tools. Basic tools

Re: [tcpdump-workers] Libpcap timeout settings in tcpdump - too long when printing to a terminal?

2015-01-09 Thread Michal Sekletar
On Thu, Jan 08, 2015 at 06:57:08PM -0800, Guy Harris wrote: With TPACKET_V3 support, Linux users are discovering what those of us using BSD-flavored OSes have known for quite a while: http://askubuntu.com/questions/570885/can-tcpdump-on-ubuntu-14-04-show-packets-in-real-time

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

2014-11-25 Thread Michal Sekletar
On Tue, Nov 25, 2014 at 09:52:59AM +0100, Romain Francoise wrote: On Mon, Nov 24, 2014 at 11:26:06AM -0800, Michal Zalewski wrote: I didn't request one, but probably. RH or Debian folks can likely just assign one from their pools. I can ask the Debian security team to assign one, or we can

Re: [tcpdump-workers] bpf.tcpdump.org vs github

2014-11-25 Thread Michal Sekletar
On Mon, Nov 24, 2014 at 10:01:11PM -0500, Michael Richardson wrote: okay, can we start again. I would appreciate some clear data and clear complaints. This is what I heard: a) which is master, bpf or github? There are commits on github/master which are not on bpf. We already have

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

2014-11-25 Thread Michal Sekletar
On Tue, Nov 25, 2014 at 03:43:21PM +0100, Michal Sekletar wrote: On Tue, Nov 25, 2014 at 09:52:59AM +0100, Romain Francoise wrote: On Mon, Nov 24, 2014 at 11:26:06AM -0800, Michal Zalewski wrote: I didn't request one, but probably. RH or Debian folks can likely just assign one from

Re: [tcpdump-workers] bpf.tcpdump.org vs github

2014-11-25 Thread Michal Sekletar
On Tue, Nov 25, 2014 at 01:12:18PM -0500, Michael Richardson wrote: Michal Sekletar msekl...@redhat.com wrote: okay, can we start again. I would appreciate some clear data and clear complaints. This is what I heard: a) which is master, bpf or github

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

2014-11-24 Thread Michal Sekletar
On Mon, Nov 24, 2014 at 09:22:23AM -0500, Michael Richardson wrote: Guy Harris g...@alum.mit.edu wrote: (I'm fine with making it the Official Home if Michael chooses to do so. I've managed to cope with the workflow changes required when libpcap/tcpdump switched to Git, when

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

2014-11-23 Thread Michal Sekletar
On Fri, Nov 21, 2014 at 11:01:15PM +0100, Romain Francoise wrote: On Fri, Nov 21, 2014 at 03:47:06PM -0500, Michael Richardson wrote: It's supposed to happen, but I'm checking. Should be there now. Is cron failing to do it's thing? Ok, the fixes still aren't on master, but now there's a

Re: [tcpdump-workers] tcpdump and libpcap releases, and future thoughts

2014-09-08 Thread Michal Sekletar
On Wed, Sep 03, 2014 at 03:34:14PM -0400, Michael Richardson wrote: I pushed the button on libpcap 1.6.2 early last night. This includes patches that Guy asked for. It seems that we might need more patches to better select Linux memory mapped packet choices? I pushed the button on

Re: [tcpdump-workers] buildbot failure in tcpdump+libpcap on Solaris-10-SPARC

2014-08-22 Thread Michal Sekletar
On Fri, Aug 22, 2014 at 05:33:14AM +, buildbot-no-re...@wireshark.org wrote: The Buildbot has detected a new failure on builder Solaris-10-SPARC while building tcpdump+libpcap. Full details are available at: http://buildbot.wireshark.org/tcpdump/builders/Solaris-10-SPARC/builds/100

Re: [tcpdump-workers] pcapng save files

2014-07-03 Thread Michal Sekletar
On Thu, Jul 03, 2014 at 11:52:03AM -0400, Michael Richardson wrote: Guy Harris g...@alum.mit.edu wrote: The current libpcap support uses the existing APIs, which can't expose the full capabilities of pcap-ng; it requires all interfaces in the pcap-ng file to have the same

Re: [tcpdump-workers] libpcap 1.5.3 pcap_open_offline_with_tstamp_precision() broken

2014-06-06 Thread Michal Sekletar
On Thu, Jun 05, 2014 at 07:21:26PM +0200, Steffen Bauch wrote: Hi, libpcap 1.5.3 (as deployed in Ubuntu 14.04 LTS) (and current GIT master head) will not output timestamps in a right way if pcapng savefiles are used and timestamp conversion is requested with

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Michal Sekletar
On Mon, Nov 18, 2013 at 12:38:24AM -0500, Benjamin Vanheuverzwijn wrote: Hi, Hi Benjamin, libpcap version: 1.4.0 (on archlinux) I am running Fedora 19 (libpcap-1.4.0). Is it possible to have multiple call to pcap_open_live() followed by pcap_close() ? It shouldn't be a problem.

[tcpdump-workers] tcpslice maintainer

2011-08-15 Thread Michal Sekletar
Hello everyone, I'd like to send a patch for tcpslice to it's maintainer, but email address tcpsl...@ee.lbl.gov seem to be dead. Is there anyone out there still maintaining tcpslice? I hope this is right place to ask because tcpslice is related project. Thanks -- Michal Sekletar, msekl