1-Exactly Mr Harris , i'm having my capture on a Linux based machine ... so if you can give some more info i would be gratefull .
if you dont mind i would like to get answers for the following :
2-in pcap-linux.c only pcap-open-live and pcap-platform-finddevs contains
#ifdef HAVE_DAG_API ..... so do i have to make similar code (#if def HAVE_SEPTEL_API ...) to only these two funtions in pcap-linux.c ?
3- pcap-linux.c contains #include pcap-int.h with contains at line 93 #ifdef HAVE_DAG_API void *dag_mem_base; /* DAG card memory base address */ u_int dag_mem_bottom; /* DAG card current memory bottom pointer */ u_int dag_mem_top; /* DAG card current memory top pointer */ int dag_fcs_bits; /* Number of checksum bits from link layer */ int dag_offset_flags; /* Flags to pass to dag_offset(). */ #endif };
so i would like to know what is this used for and if i have to make also a similar code for my septel device.
4- the same for : (pcap.c , line 68) #ifdef HAVE_DAG_API #include <dagnew.h> #include <dagapi.h> #endif
knowing that i could not find these .h files
and for : (inet.c , line 539) #ifdef HAVE_DAG_API || strstr(device, "dag") != NULL #endif
5- Finally what about functions other than init_linktype in gencode.c , like gen_linktype(proto),gen_gateway , gen_scode , gen_ecode , gen_broacast and others that contains code based on liketype .
Thanks in advance ..... Really appreciate your effort
Gilbert.
From: Guy Harris <[EMAIL PROTECTED]> Reply-To: tcpdump-workers@lists.tcpdump.org To: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] new media support(Intel/Septel) Date: Sun, 03 Apr 2005 16:04:37 -0700
gilbert HOYEK wrote:
i think i should choose 139 or 140 for the simple reason that my ss7 packets includes MTP2 protocols
If all the packets start with MTP2 headers, you'd use LINKTYPE_RAWSS7_MTP2, and that'd be DLT_MTP2.
i first sent this message to ethreal and i got the following answer from Mr . Guy Harris (thanks 2 him).
so it helped me a lot but still the part about the pcap-dag.c , idid not get it well .....so if you can explain it to me i would be gratefu:
There isn't anything about pcap-dag.c in my message; pcap-dag.c is an example of a way to add support for capture devices other than regular network interfaces, but it's an example that is probably easier to understand if you're familiar with the API that Endace has for their DAG network traffic capture cards.
Adding support for new capture devices isn't easy; the DAG cards were the first devices for which that was done, and we don't have a "HOWTO" document on it. I could probably give you some more information if you tell us what OS you're doing this on - one Intel manual I saw indicated that they support Windows, Linux, and Solaris, and my guess is that you're doing this on Linux, but I don't know that you're using Linux.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
_________________________________________________________________
Don't just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
_________________________________________________________________
Don't just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.