dect
/
libpcap
Archived
1
0
Fork 0
PCAP Library with DECT support
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
 
 
 
 
 
 
Patrick McHardy 481ab2d4a6 Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
ChmodBPF To quote 13 years ago
SUNOS4 Initial revision 23 years ago
Win32 Fixes to compile WinPcap under MINGW32 and MINGW64. 12 years ago
bpf/net Fix check for a constant 0 argument to BPF_DIV. 13 years ago
doc documentation for proposed pcap format 19 years ago
lbl Get rid of a bogus */ in the middle of a comment. 20 years ago
missing Move "snprintf.c" to the "missing" directory, as that's where 19 years ago
msdos From Gisle Vanem: 15 years ago
packaging On Linux (and other platforms using the V7 man page conventions), we 14 years ago
pcap Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
tests Move test source to a tests directory, add a new test for nonblocking mode. 13 years ago
.cvsignore More files to ignore. 14 years ago
.gitignore Clean up handling of the "net" symlink made by the configure script. 12 years ago
CHANGES Mention the 802.15.4 changes. 12 years ago
CREDITS Fix alignment of Love's name. 12 years ago
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 15 years ago
LICENSE added license file 22 years ago
Makefile.in Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
README Again, we're using Git now. 13 years ago
README.Win32 Again, we're using Git now. 13 years ago
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
README.dag From Stephen Donnelly: 17 years ago
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 18 years ago
README.linux Note that libpcap links with libnl by default - and that this shouldn't 13 years ago
README.macosx Put in a note about the Snow Leopard bug that requires that you have BPF 13 years ago
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 18 years ago
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 22 years ago
TODO Again, we're using Git now. 13 years ago
VERSION The first 1.2.x release will be 1.2.0, not 1.2. 13 years ago
aclocal.m4 On FreeBSD/SPARC64, use -fPIC - it's apparently necessary. 13 years ago
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 22 years ago
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 15 years ago
bpf_dump.c Make some arguments const pointers if that makes sense. 15 years ago
bpf_image.c Include headers that should cause u_int64_t to be defined. 13 years ago
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 15 years ago
config.guess Update config.guess and config.sub to the latest versions. 13 years ago
config.h.in Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
config.sub Update config.guess and config.sub to the latest versions. 13 years ago
configure Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
configure.in Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
dlpisubs.c Don't define pcap_stream_err() if we're not going to use it. 13 years ago
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
etherent.c Include headers that should cause u_int64_t to be defined. 13 years ago
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 17 years ago
fad-getad.c Add a #include required on RHEL5. 13 years ago
fad-gifc.c Scan /proc/net/dev on Linux regardless of how we get the interface list. 13 years ago
fad-glifc.c From Sagun Shakya: fix typoes in comments. 15 years ago
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 19 years ago
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 15 years ago
gencode.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
gencode.h Add support for "wlan ra" and "wlan ta". 12 years ago
grammar.y Add support for "wlan ra" and "wlan ta". 12 years ago
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
inet.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
install-sh Initial revision 23 years ago
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 22 years ago
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 15 years ago
nametoaddr.c From Gisle Vanem: 14 years ago
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 20 years ago
optimize.c Include headers that should cause u_int64_t to be defined. 13 years ago
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 15 years ago
pcap-bpf.c Fix a problem that shows up with a max packet count passed to pcap_dispatch(). 12 years ago
pcap-bpf.h Add RCS IDs. 16 years ago
pcap-bt-linux.c Do filtering on USB and Bluetooth capturing. 13 years ago
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-can-linux.c Fix some problems pointed out by compiler warnings. 13 years ago
pcap-can-linux.h Add support for CANbus capture. 13 years ago
pcap-common.c Add DLT_DBUS, for raw D-Bus messages. 12 years ago
pcap-common.h Byte-swap the extra fields in the "version 1" USB monitor header. 13 years ago
pcap-config.1 Add a --additional-libs flag to pcap-config, to write out any additional 14 years ago
pcap-config.in Use config.status to generate pcap-config. 12 years ago
pcap-dag.c handle->md.stat should be zeroed out when we initially allocated the 13 years ago
pcap-dag.h Updating Endace DAG ERF support. 14 years ago
pcap-dect-linux.c Import pcap-dect-linux 12 years ago
pcap-dect-linux.h Import pcap-dect-linux 12 years ago
pcap-dlpi.c Treat either EPERM or EACCES as "no soup for you". 12 years ago
pcap-dos.c From Gisle Vanem: 15 years ago
pcap-dos.h From Gisle Vanem: MS-DOS support. 18 years ago
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 16 years ago
pcap-filter.manmisc.in Add support for "wlan ra" and "wlan ta". 12 years ago
pcap-int.h Add support for setting the time stamp type for a capture. 12 years ago
pcap-libdlpi.c Treat either EPERM or EACCES as "no soup for you". 12 years ago
pcap-linktype.manmisc.in Hyphenate "link-layer" everywhere. 13 years ago
pcap-linux.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
pcap-namedb.h Add a cautionary note to OS vendors here as well. 16 years ago
pcap-nit.c If an activate routine fails, it needs to clean up the pcap_t, close 13 years ago
pcap-null.c Update to the new style, wherein each capture type has its own 14 years ago
pcap-pf.c If an activate routine fails, it needs to clean up the pcap_t, close 13 years ago
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 14 years ago
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
pcap-sita.html Again, Git, not CVS. 13 years ago
pcap-snf.c Add Myricom SNF API support as a new pcap device. 13 years ago
pcap-snf.h Add Myricom SNF API support as a new pcap device. 13 years ago
pcap-snit.c If an activate routine fails, it needs to clean up the pcap_t, close 13 years ago
pcap-snoop.c If an activate routine fails, it needs to clean up the pcap_t, close 13 years ago
pcap-stdinc.h Don't define or use any of the SIZEOF_ values. 13 years ago
pcap-tstamp.manmisc.in Give the names, as well as the #defines, for time stamp types. 12 years ago
pcap-usb-linux.c Check whether we have <linux/compiler.h>. 12 years ago
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-win32.c Another fix for the compilation of WinPcap under MINGW32/MINGW64. 12 years ago
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 12 years ago
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 16 years ago
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
pcap_activate.3pcap Return PCAP_ERROR_PROMISC_PERM_DENIED if you have permission to open the 12 years ago
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_can_set_rfmon.3pcap Add some additional SEE ALSO references. 12 years ago
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_compile.3pcap.in Add a #define for 0xffffffff as PCAP_NETMASK_UNKNOWN, for use when you 13 years ago
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink.3pcap.in Consistently use "link-layer header type". 12 years ago
pcap_datalink_name_to_val.3pcap Consistently use "link-layer header type". 12 years ago
pcap_datalink_val_to_name.3pcap Consistently use "link-layer header type". 12 years ago
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 14 years ago
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_fileno.3pcap Describe all the cases where pcap_fileno() returns a file descriptor and 13 years ago
pcap_findalldevs.3pcap Add some additional SEE ALSO references. 12 years ago
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_get_selectable_fd.3pcap Give N. Leiten credit for the poll() exceptional condition checks in 13 years ago
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_list_datalinks.3pcap.in Consistently use "link-layer header type". 12 years ago
pcap_list_tstamp_types.3pcap.in Add support for setting the time stamp type for a capture. 12 years ago
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_loop.3pcap Another change from Debian. 14 years ago
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 15 years ago
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_open_offline.3pcap.in Mention that we can read some pcap-ng files. 13 years ago
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_datalink.3pcap Consistently use "link-layer header type". 12 years ago
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_tstamp_type.3pcap.in If the specified time stamp type isn't supported, treat that as a warning. 12 years ago
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 15 years ago
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_stats.3pcap From Dustin Spicuzza: support ps_ifdrop on Linux, using /proc/net/dev. 13 years ago
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 15 years ago
pcap_tstamp_type_name_to_val.3pcap Add support for setting the time stamp type for a capture. 12 years ago
pcap_tstamp_type_val_to_name.3pcap Add support for setting the time stamp type for a capture. 12 years ago
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 18 years ago
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 15 years ago
savefile.c Reject attempts to put savefiles into non-blocking mode. 13 years ago
scanner.l Fixes to compile WinPcap under MINGW32 and MINGW64. 12 years ago
sf-pcap-ng.c Interface IDs are 0-origin. 12 years ago
sf-pcap-ng.h Add limited support for reading pcap-ng files. 13 years ago
sf-pcap.c Added the definition of SET_BINMODE under WIN32. 13 years ago
sf-pcap.h Add limited support for reading pcap-ng files. 13 years ago
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 21 years ago

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.34 2008-12-14 19:44:14 guy Exp $ (LBL)

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
tcpdump-workers@lists.tcpdump.org

Anonymous Git is available via:
git clone git://bpf.tcpdump.org/libpcap

Version 1.x.y of LIBPCAP can be retrieved with the CVS tag "libpcap_1_{x}rel{y}":
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_1_{x}rel{y} libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from Lawrence Berkeley National Laboratory
Network Research Group <libpcap@ee.lbl.gov>
ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture. libpcap provides a portable
framework for low-level network monitoring. Applications include
network statistics collection, security monitoring, network debugging,
etc. Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter. BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''. A compressed PostScript version can be
found at

ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters). Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD. DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes). Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux
and *BSD, among other platforms.

It sets the soname of the library to "libpcap.so.1"; this is what it
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as
that.

We've been maintaining binary compatibility between libpcap releases for
quite a while; there's no reason to tie a binary linked with libpcap to
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org". Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

- The TCPdump team