Re: [tcpdump-workers] bad soname for libpcap.so.1.6.2 ?

Hello, On Fri, May 06, 2016 at 05:22:24PM +0200, ikuzar RABE wrote: > is normal that soname of libpcap.so.1.6.2 is libpcap.so.0.8 ? This is specific to Debian and its derivatives, for more details see: https://people.debian.org/~rfrancoise/libpcap-faq.html -- Romain Francoise <r

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

directly. Ok, thanks. So unless someone has a better idea, I will ask MITRE. -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

via internal Red Hat channels? -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

. Yes, please. -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

[tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

://seclists.org/bugtraq/2014/Nov/89 http://seclists.org/bugtraq/2014/Nov/90 Thanks, -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

to patch. But did you notify the distros? Because I didn't get advance notice, and the others haven't released security updates yet either. Thanks, -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ ___ tcpdump-workers mailing

Re: [tcpdump-workers] Official patches for CVE-2014-8767/CVE-2014-8768/CVE-2014-8769?

On Fri, Nov 21, 2014 at 11:01:15PM +0100, Romain Francoise wrote: But did you notify the distros? Because I didn't get advance notice, and the others haven't released security updates yet either. Oh, actually I'm wrong: Fedora has updated packages. -- Romain Francoise rfranco...@debian.org

Re: [tcpdump-workers] building libpcap without usb support

On Sun, Jul 06, 2014 at 03:19:19AM -0700, Guy Harris wrote: linux/usbdevice_fs.h is a kernel header; does USB sniffing require libusb-dev at all? Nope. libusb is only required for canusb support. ___ tcpdump-workers mailing list

Re: [tcpdump-workers] Tcpdump 4.6 delayed

Michael Richardson m...@sandelman.ca writes: I was way too at this ietf89 to build changelog and push release button. I propose to release at Easter. (April 21) So it looks like this never happened? ___ tcpdump-workers mailing list

Re: [tcpdump-workers] Failing tcpdump 4.5.1 testsuite

Michael Richardson m...@sandelman.ca writes: True... I'm not sure that we have, up until now, considered this a problem. I don't think we've ever had this problem; at least I always update tcpdump first in Debian (just in case) and this is the first time this happens.

[tcpdump-workers] Failing tcpdump 4.5.1 testsuite

Hi, FYI, the tcpdump 4.5.1 testsuite has new two testcases which we may want to disable by default: - the pppoes_id testcase requires a pcap version which supports PPPoE session ID filtering (= 1.5) - the nflog-e testcase requires a little-endian host, the NFLOG TLV length is in host byte

[tcpdump-workers] [PATCH] LLDP: print packet protocol at all verbosity levels

The LLDP printer doesn't show the packet protocol unless -v is used, which results in pretty useless output lines where only the timestamp is present. Make sure we include the default protocol+length output even in default mode. --- print-lldp.c |4 +--- 1 file changed, 1 insertion(+), 3

Re: [tcpdump-workers] Michael Richardson: 4.3 rc1

Michael Richardson m...@sandelman.ca writes: I'll push it out late Monday (2012-06-11). Thanks, both releases are now in Debian. Did you mean to sign them with your personal key rather than the tcpdump.org signing key? Thanks, -- Romain Francoise rfranco...@debian.org http

[tcpdump-workers] 4.3/1.3 releases?

Hi, What's the status of the 4.3/1.3 releases? I see that CHANGES has been updated, there are apparently corresponding branches in Git (although they are not present on GitHub and the bpf server appears to be down) but the tarballs are not on the website. Thanks, -- Romain Francoise rfranco

Re: [tcpdump-workers] Building tcpdump with static libraries

, that's right. -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] 4.3/1.3 releases?

upstreamable. Thanks! -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] 4.3/1.3 releases?

: helper scripts, dependencies, toolchain, etc. The lifecyle is just too different from upstream's generally to make it worthwhile for Debian developers to maintain their packaging with the upstream code. You can still do that though--just clone from git.debian.org ;-) -- Romain Francoise rfranco

Re: [tcpdump-workers] [PATCH] Avoid losing CPPFLAGS in configure.in

!= no; then fi AC_CHECK_LIB(crypto, DES_cbc_encrypt) - savedppflags=$CPPFLAGS + savedcppflags=$CPPFLAGS CPPFLAGS=$CPPFLAGS $V_INCLS AC_CHECK_HEADERS(openssl/evp.h) CPPFLAGS=$savedcppflags -- Romain Francoise

[tcpdump-workers] [PATCH] Avoid losing CPPFLAGS in configure.in

=$CPPFLAGS CPPFLAGS=$CPPFLAGS $V_INCLS AC_CHECK_TYPES(pcap_if_t, , , [#include pcap.h]) CPPFLAGS=$savedcppflags -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Capturing in 32 bit guests

on the system to determine whether TPACKET_V2 is supported or not (I don't know which kernel version first introduced it). You need 2.6.27 to make it work (TPACKET_v2 + PACKET_RESERVE). -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump

[tcpdump-workers] tcpdump 4.2.0rc1 build fix

\ pcap-missing.h \ pmap_prot.h \ + ppi.h \ ppp.h \ route6d.h \ rpc_auth.h \ Thanks, -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] [PATCH] When saving with -U, flush the dump file after opening it

Guy Harris g...@alum.mit.edu writes: Checked into the main and 4.1 branches and pushed. Thanks, -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

[tcpdump-workers] [PATCH] When saving with -U, flush the dump file after opening it

Reading from a capture file that has not yet received any packets fails with truncated dump file; to avoid this, flush the file (forcing the pcap header out) immediately after opening it. Suggested by Ferenc Wagner wf...@niif.hu in Debian bug #533625. --- tcpdump.c |4 1 files changed,

[tcpdump-workers] [PATCH] Small fixes to the tcpdump man page

Merge back changes from the Debian package: - fix TCP flags output description, by Christophe Rhodes cs...@cantab.net Original patch submitted in http://bugs.debian.org/575724 - two remaining typo fixes, by A Costa agco...@gis.net Original patch submitted in http://bugs.debian.org/342310 ---

Re: [tcpdump-workers] Release schedule?

Michael Richardson m...@sandelman.ca writes: http://www.ca.tcpdump.org/beta/ contains 4.1/1.1 tar.gz, signed with my regular key. If there are no complaints about these tar balls, I will resign it with the tcpdump release key on Saturday. Both seem fine to me. -- Romain Francoise rfranco

[tcpdump-workers] libpcap's usbmon interfaces vs. usb ethernet devices

USB_IFACE usbmon #define USB_TEXT_DIR /sys/kernel/debug/usbmon #define SYS_USB_BUS_DIR /sys/bus/usb/devices #define PROC_USB_BUS_DIR /proc/bus/usb -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca

[tcpdump-workers] Fwd: [PATCH] fix printing of tcp seqno for data segments

) { -- Romain Francoise rfranco...@debian.org http://people.debian.org/~rfrancoise/ - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Spelling fixes

Guy Harris [EMAIL PROTECTED] writes: Checked into the main and x.9 branches. Thanks. -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise/ `- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] 3.9.x

Michael Richardson [EMAIL PROTECTED] writes: I will do a new 3.9.3, and sign it. The VERSION files are still at x.9.2... -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise/ `- - This is the tcpdump-workers list. Visit https

Re: [tcpdump-workers] 3.9.x

Michael Richardson [EMAIL PROTECTED] writes: Sigh. Sorry. I'm not going to fix this. Let's wait for a bug report. No worries. I'll patch them in the Debian diff. -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise

Re: [tcpdump-workers] release 0.9.2/3.9.2

for 0.9.x release, or something. Looks great otherwise! -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise/ `- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] 3.9.1

. -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise/ `- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] detecting libpcap 0.9

defined at /usr/include/pcap.h:227: | extern int pcap_setdirection(pcap_t *, direction_t); | | ABI is not backward-compatible | API is not backward-compatible -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise/ `- - This is the tcpdump

Re: [tcpdump-workers] (3) tcpdump infinite loop bugs... (2 fixed

stable) and it's not vulnerable to the isis, ldp or rsvp infloops. It is vulnerable to the bgp one and the fix you committed to the 3.8 branch can be trivially translated in 3.6 so I did just that. Thanks again, -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http

Re: [tcpdump-workers] (3) tcpdump infinite loop bugs... (2 fixed

to be fixed in 3.9/CVS but the versions have diverged so much since 3.8 that I don't really know what's relevant... Do you plan to merge fixes in the 3.8 branch or should I hack things myself? Thanks, -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org

Re: [tcpdump-workers] (3) tcpdump infinite loop bugs... (2 fixed

Can someone request CAN numbers for these? Michael? -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED] `. `' http://people.debian.org/~rfrancoise/ `- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] (3) tcpdump infinite loop bugs... (2 fixed

Hannes Gredler [EMAIL PROTECTED] writes: for software [3.9,cvs] that has not even been released yet ? All the exploits mention tcpdump 3.8.x as being affected. I didn't run them to check that it's really the case, though... did you? -- ,''`. : :' :Romain Francoise [EMAIL PROTECTED