dect
/
libpcap
Archived
13
0
Fork 0
Code Releases Activity

Commit Graph

  • bc61a9fd37 We weren't returning a warning if the interface had an ARPHRD_ type we didn't handle; fix the code to do so. guy 2001-10-25 08:27:18 +0000
  • 03c414f542 Don't print the warning for an ARP type not supported by libpcap, return it in the error message buffer, as is done for warnings in other implementations of "pcap_open_live()". guy 2001-10-25 06:46:14 +0000
  • 8ccdbcd8e5 started 0.7 CHANGES. mcr 2001-10-23 04:37:31 +0000
  • 6e796fb8ba Fix a typo and a formatting nit. guy 2001-10-13 06:28:53 +0000
  • daa93e7a2d Add "stamp-h" and "stamp-h.in" to ".cvsignore"; they're already in tcpdump's ".cvsignore". guy 2001-10-13 05:29:27 +0000
  • 26f0ba1e04 Add some optimizer debugging (not compiled by default) fenner 2001-10-13 04:23:28 +0000
  • f3d3a0b363 clarified use of pcap_dump(3) parameters. mcr 2001-10-12 21:43:29 +0000
  • 5ad8d9d9e2 As suggested by Hyung Sik Yoon <hsyn@kr.ibm.com>, use 2 rather than 0 as the SAP on AIX if a SAP of 1537 doesn't work; he says that 2 works on Token Ring but 0 doesn't. guy 2001-10-12 06:43:42 +0000
  • d5735e2448 Split off the code to scan "/proc/net/dev" into a separate routine, and don't call it if we've already had an error. guy 2001-10-10 06:46:50 +0000
  • 519b0b5a59 If we have "/proc/net/dev", and don't have <ifaddrs.h> (i.e., don't have "getifaddrs()"), after processing the list returned by SIOCGIFCONF, scan "/proc/net/dev" for interface names, and add to the list of interfaces entries for those interfaces, with no associated addresses (if the interfaces were already added, with addresses, from the list returned by SIOCGIFCONF, they won't get added again). guy 2001-10-09 05:43:19 +0000
  • 5a85948f80 We don't actually use HAVE_FREEIFADDRS, so there's no point in checking whether we have "freeifaddrs()" (we don't check whether we have "getifaddrs()", and if we have "getifaddrs()" but not "freeifaddrs()", we're stuck with leaking memory). guy 2001-10-09 03:53:38 +0000
  • 79aeeee5ae Check in the updated configure script, from the following change to aclocal.m4: guy 2001-10-08 10:19:55 +0000
  • 2ae227c882 Bump the version to 0.7. guy 2001-10-08 08:17:03 +0000
  • 9c0a593a2e From Scott Gifford: guy 2001-10-08 01:06:20 +0000
  • 2de302a362 ARPHRD_ARP doesn't uniquely specify the header that will appear on packets before the network-layer header; we already deal with that in tcpdump, and we could probably try to deal with that in the code generator, but it's less of a pain to just punt to DLT_LINUX_SLL. guy 2001-09-23 22:43:57 +0000
  • ecead9709d Reset the VLAN flags when compiling a new expression. This allows correct compilation of multiple expressions containing the "vlan" keyword in the same program. fenner 2001-09-20 00:24:24 +0000
  • 6aa0217fdb The Itanium does not like unaligned memory accesses (the Linux kernel warns about them and probably performance suffers). Therefore I added the cpu to the list of systems where unaligned access should be avoided. See also http://bugs.debian.org/112152 torsten 2001-09-14 08:08:15 +0000
  • 9156c4fbfd Revert to catching only bogus ethernet addresses that end in a colon, since the updated expression caught the "4:2" in "ip[4:2]". fenner 2001-09-14 01:40:57 +0000
  • c8c9f4c3aa Reflect the renaming of "INSTALL" to "INSTALL.txt". guy 2001-09-09 19:36:25 +0000
  • 7acd15ba8d Reserve 116 for IP Filter capture files and 117 for OpenBSD DLT_PFLOG. guy 2001-09-09 05:02:28 +0000
  • b57608cf35 LINKTYPE_IEEE802_11 and LINKTYPE_LOOP, and DLT_IEEE802_11, are no longer reserved for future use; they're being used. guy 2001-09-09 04:27:18 +0000
  • ba047e2bd0 Add a DLT_ value and a link-layer type value for savefiles for Acorn Econet. guy 2001-09-05 04:27:23 +0000
  • 545afab583 Changes from Pavel Kankovsky to reset the kernel filter in "pcap_setfilter()" if we're not using a kernel filter, in case a previous call to "pcap_setfilter()" had succeeded in adding a kernel filter, as if we're doing userland filtering we need to get rid of all kernel filters that might discard packets that'd pass the userland filter. guy 2001-08-30 03:08:43 +0000
  • cec0453730 Patch, based on a patch from Pavel Kankovsky <kan@dcit.cz>, to flush all packets queued up on the socket when we set a kernel filter on the socket, so that if there are any queue-up packets that wouldn't have passed the new filter, we don't see them. (Some other packet capture mechanisms do this automatically; this prevents tcpdump, for example, from showing or saving, when run with a filter, some packets that wouldn't have passed the filter.) guy 2001-08-25 05:08:26 +0000
  • 96943e6868 In "pcap_read_packet()", always use "handle->buffer + handle->offset" as the pointer to the beginning of the link-layer header; never use just "handle->buffer", as, if "handle->offset" is non-zero (as is the case with many link-layer types, including Ethernet), "handle->buffer" doesn't point to the beginning of the link-layer header. guy 2001-08-24 09:27:14 +0000
  • 8d039ab3b6 Define MSG_TRUNC as 0x20 if it's not defined, so that if this is compiled on a system that doesn't have it, it'll use it on systems that do have it. guy 2001-08-24 07:46:52 +0000
  • 626de160d6 Move the code to allocate the packet buffer into "pcap_open_live()", so that we don't have almost-duplicate code in "live_open_old()" and "live_open_new()". This fixes a bug wherein "live_open_new()" wasn't making the buffer size the maximum of "enough to hold packets of the MTU obtained from the socket" and "the snapshot length" (for some reason, "recvfrom()" was copying more data than the MTU obtained from the socket). guy 2001-08-23 16:36:41 +0000
  • 6b8e18fa5a The rev 1.79 commit somehow undid the changes from 1.75. Put them back. fenner 2001-08-20 18:24:16 +0000
  • 144240e695 Fix some lexer bugs: - Bad ethernet addresses no longer have to end with a colon - Host names no longer have to be at least two characters long - Bad tokens no longer have to end with an "i" fenner 2001-08-20 18:17:29 +0000
  • 380a3dbf49 From Scott Barron <sb125499@ohiou.edu>: use the SOL_PACKET/PACKET_STATISTICS "getsockopt()" call, on Linux kernels that support it, to get packet statistics, so that we can report the number of dropped packets, and always use <linux/if_packet.h> to get definitions for PF_PACKET sockets, so that we don't depend on glibc's header files having been updated to support all the latest shiniest kernel features (many systems with 2.4[.x] kernels don't have a <netpacket/packet.h> that defines "struct tpacket_stats", for example, so we wouldn't have been able to support that kernel feature on those systems). guy 2001-07-29 18:25:46 +0000
  • 11c1cf8ee2 Add comments to "pcap_stats()" indicating what the counters mean on the various platforms (assuming the vendors' documentation is correct and that I've correctly interpreted it). guy 2001-07-29 01:22:40 +0000
  • a891a1d5d0 On AIX, if binding to the SAP 1537 fails, try binding to 0; Token Ring devices appear to reject attempts to bind to 1537, perhaps because Token Ring devices use SAPs rather than Ethertypes and 1537 isn't a valid SAP value. guy 2001-07-28 23:12:48 +0000
  • b92ebafe8e Cast the argument to <ctype.h> macros to "unsigned char", to eliminate GCC warnings and to keep the macros from referring outside an array when handed bytes with the 8th bit set. guy 2001-07-28 22:56:34 +0000
  • 7fd1de18e7 Add ENDT_SLIP, ENDT_PPP, ENDT_LOOPBACK, and ENDT_TRN to the case statement checking the link-layer type. guy 2001-07-28 22:53:07 +0000
  • 0c2cc33435 Fix a typo. guy 2001-07-04 07:34:50 +0000
  • ca3fec5964 Fix a memory leak found by Miklos Szeredi <Miklos.Szeredi@eth.ericsson.se> - "pcap_ether_aton()" allocates memory for the MAC address, but we don't free it when we're done with it. guy 2001-07-03 19:15:47 +0000
  • db2a1d1e5e The "dl_module_id_1" and "dl_module_id_2" members of a "dl_hp_ppa_info_t" are arrays of "u_char" (or "u_int8_t"), presumably to get around the problems of signed characters; this causes complaints from HP's C compiler if we pass them as an argument to "strcmp()", so cast them to "const char *". guy 2001-06-27 05:22:44 +0000
  • 70836ff6e9 Put a "return (0);" into "__pcap_nametodnaddr()" to squelch complaints the Digital^H^H^H^H^H^H^HTru64 UNIX C compiler. guy 2001-06-27 05:11:48 +0000
  • 7aa547ff09 Change from NetBSD, by Martin Husemann <martin@netbsd.org>: guy 2001-06-20 07:12:38 +0000
  • b63de9ed9e bsdi3 does not have IF_NAMESIZE (kame/bsdi3 has it). have last-resort #define. itojun 2001-06-18 23:43:16 +0000
  • 77d52cac81 Support for LocalTalk hardware, from Uns Lider <unslider@miranda.org>. guy 2001-06-18 08:46:28 +0000
  • 6cd32e5cef 802.11 support, from Javier Achirica <achirica@ttd.net>. guy 2001-06-10 01:11:39 +0000
  • 9f302b1f7f Support for capturing on encrypted CIPE tunnels in IRIX, from Franz Schaefer <schaefer@mond.at>. guy 2001-06-05 03:48:41 +0000
  • 8b26b4e6ef Documentation fixes from Chris Pepper <pepper@mail.reppep.com>. guy 2001-06-05 03:45:53 +0000
  • e83123b1eb DLT_ value and capture file header LINKTYPE_ value reserved for Apple LocalTalk hardware. guy 2001-06-05 03:09:39 +0000
  • c3d1fa6983 Allow "ip6 proto ___" constructs. Don't parse "ip6" if not compiled with ip6 support. fenner 2001-05-30 01:27:21 +0000
  • 469dc3588b Put the code to get a unit number from a device name into a common routine, and use it both on HP-UX and other DLPI systems; this means that, in case there is ever a network device on HP-UX with a number in the device type name, we'll properly extract the unit number (i.e., we'll extract the last number from the name, not the first number) - I don't think that'll ever happen, but putting it into a common routine is cleaner in any case. guy 2001-05-21 07:33:56 +0000
  • 60673d8144 Patch from Xianjie Zhang <xzhang@cup.hp.com> to handle HP-UX systems with a large number of PPA's. guy 2001-05-21 03:50:08 +0000
  • c711e1de8d Patch from Stefan Hudson <hudson@mbay.net> to handle, on Solaris, device class names with digits in them. guy 2001-05-21 03:35:04 +0000
  • 283da6d726 SCTP support from Armando L. Caro Jr. <acaro@mail.eecis.udel.edu> fenner 2001-05-10 14:48:01 +0000
  • e1de1941ed newest config.guess and config.sub from ftp://sunsite.utk.edu/pub/gnu/ftp/config/ mcr 2001-05-05 20:50:41 +0000
  • e5faebb3e7 RPM spec file mcr 2001-05-05 00:57:33 +0000
  • 6da97d192d renamed INSTALL to INSTALL.txt mcr 2001-05-05 00:57:10 +0000
  • 0cc259467a Allow pcap_open_live() to return warnings in ebuf. fenner 2001-04-30 16:10:51 +0000
  • 42f0938c7c Fix up the RCS ID, and put in a line indicating the NetBSD header file we got this stuff from. guy 2001-04-24 02:17:52 +0000
  • 38b97b7e84 ARCNet support, from NetBSD. guy 2001-04-17 08:25:21 +0000
  • 80788ad380 Add support for NetBSD DLT_PPP_ETHER, as per the NetBSD libpcap. guy 2001-04-17 08:10:00 +0000
  • 5522fb3b20 Update the version number. guy 2001-04-11 05:18:28 +0000
  • 5f649f110e Patch from Marcus Felipe Pereira <marcus@task.com.br> to map ARPHRD_HDLC to DLT_C_HDLC. guy 2001-04-09 05:55:39 +0000
  • 15cc8e524f Fix the man page's description of "pcap_file()" and "pcap_fileno()" to reflect reality. guy 2001-03-26 10:21:31 +0000
  • 534381a041 Attempt to put the link-layer payload of packets on a 4-byte boundary, as is done in some other "pcap-XXX.c" modules. guy 2001-03-20 05:50:33 +0000
  • 67e19bff40 Add Jason Thorpe's name to the list of contributors. guy 2001-02-25 00:54:05 +0000
  • 4ed17921a9 added english versions of many common fields (from thorpej) mcr 2001-02-24 18:21:14 +0000
  • cae3c555e6 Patch from NetBSD, by Klaus Klein <kleink@netbsd.org>, to support "vrrp" as an IP protocol, like "udp", "tcp", "icmp", "pim", etc.. guy 2001-02-21 09:33:03 +0000
  • bc0425f86c Patch from Onno van der Linden <onno@simplex.nl> to support Token Ring on DLPI systems. guy 2001-02-21 09:07:40 +0000
  • ae09ab3412 ignore non-IP address. itojun 2001-02-12 09:33:21 +0000
  • fa4449caf2 Clarify what "pcap_next()" does, as per a suggestion by Michael T. Stolarchuk. guy 2001-02-09 04:50:17 +0000
  • b0dcde29f7 Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 0xf0 as the DSAP and SSAP). guy 2001-01-28 09:44:48 +0000
  • e191909508 Pick up the "README.tru64" file from Ethereal, and change it to refer to tcpdump, for the benefit of Digital^H^H^H^H^H^H^HTru64 UNIX users. guy 2001-01-24 06:52:52 +0000
  • a6e177c611 Patch from Igor Khristophorov <igor@atdot.org> to handle adaptive SLIP interfaces on Linux just like standard SLIP interfaces. guy 2001-01-20 07:47:53 +0000
  • 8a891e0b69 Note that captures on the "any" device won't be done in promiscuous mode, regardless of the value of "promisc". libpcap_0_6rel2 guy 2001-01-18 04:42:11 +0000
  • 1ae6bd52d5 Note that captures on the "any" device won't be done in promiscuous mode, regardless of the value of "promisc". guy 2001-01-18 04:41:45 +0000
  • ea57200c4b Patch from Lorenzo Cavallaro <sullivan@sikurezza.org> to create $(DESTDIR)/$(mandir)/man3 before installing the libpcap man page, if that directory doesn't already exist. guy 2001-01-18 04:06:24 +0000
  • fa766cfb0c Patch from Lorenzo Cavallaro <sullivan@sikurezza.org> to create $(DESTDIR)/$(mandir)/man3 before installing the libpcap man page, if that directory doesn't already exist. guy 2001-01-18 04:05:12 +0000
  • e3c1856e56 Some platforms that lack <netpacket/packet.h> define PF_PACKET but don't support PF_PACKET sockets, and, in particular, don't define in <linux/if_packet.h> any of the stuff needed by the code to handle PF_PACKET sockets. Define HAVE_PF_PACKET_SOCKETS if either guy 2001-01-18 03:59:56 +0000
  • 952a563412 Some platforms that lack <netpacket/packet.h> define PF_PACKET but don't support PF_PACKET sockets, and, in particular, don't define in <linux/if_packet.h> any of the stuff needed by the code to handle PF_PACKET sockets. Define HAVE_PF_PACKET_SOCKETS if either guy 2001-01-18 03:58:22 +0000
  • d9d8216954 Sigh. Not all systems have <netinet/if_ether.h> - for example, at least some libc5 Linux systems don't - so we have to check whether it exists, and include it only if it does. guy 2001-01-17 18:21:54 +0000
  • 8a6db7a7d5 Sigh. Not all systems have <netinet/if_ether.h> - for example, at least some libc5 Linux systems don't - so we have to check whether it exists, and include it only if it does. guy 2001-01-17 18:18:48 +0000
  • 12acb89857 At least some libc5 systems don't have <netinet/if_ether.h> but do have <net/if_arp.h>, and the stuff we want is in <net/if_arp.h>, so include that rather than <netinet/if_ether.h>. guy 2001-01-17 18:16:53 +0000
  • 9c3650645f At least some libc5 systems don't have <netinet/if_ether.h> but do have <net/if_arp.h>, and the stuff we want is in <net/if_arp.h>, so include that rather than <netinet/if_ether.h>. guy 2001-01-17 07:42:37 +0000
  • 2f454fd004 Check for all four types of IPX frame on DLT_LINUX_SLL captures. guy 2001-01-15 00:03:40 +0000
  • 79762d33da I've seen captures with all four different flavors of IPX frames on Ethernet, so, at least on Ethernet, when checking for IPX frames, check for all of them, including Ethernet_II and Ethernet_SNAP. guy 2001-01-14 21:26:52 +0000
  • d4869582d0 Handle STP (under the assumption that the "Bridging PDU"s that go over PPP are Spanning Tree Protocol Bridging PDUs) and IPX over PPP. guy 2001-01-14 08:09:58 +0000
  • d17596dbd9 Add "ipx", which checks for the LLC SAP for IPX as well as, on Ethernet, for "Novell 802.3" frames, which are 802.3 frames (i.e., the type/length field is a length field, i.e. it's <= ETHERMTU) with 0xFFFF as the first 2 bytes. We don't yet check for ETHERTYPE_IPX as well. guy 2001-01-14 07:57:47 +0000
  • d64d7a7930 Set "off_linktype" to the correct value for the offset of the Ethernet type field in the fake header for Linux cooked captures, so that the correct code is generated for tests of that field. guy 2001-01-14 06:48:35 +0000
  • c3c2ed00d5 Generate code to check for LLC SAP values on Linux cooked captures. guy 2001-01-14 05:30:07 +0000
  • 2b3dac284e Support checking for protocols specified by an LLC SAP on FDDI, Token Ring, and RFC 1483-style ATM, as well as on Ethernet. guy 2001-01-14 04:34:51 +0000
  • 90018ebb80 Summary of changes for 0.6. libpcap_0_6rel1 guy 2001-01-10 04:10:33 +0000
  • af32a655e1 Add some additional entries. guy 2001-01-10 04:06:44 +0000
  • 71e02cbc34 Update the last modification date. guy 2001-01-03 22:52:26 +0000
  • 60ac80bd7a Remove the "select()" from the code path for reading live captures on Linux; Linux isn't the only platform whose kernel doesn't support a read timeout, and even some that *do* don't start the timer until at least one packet has arrived (Solaris, for example), so no portable application can depend on "pcap_dispatch()", say, blocking for no longer than the timeout - they must do a "select()" themselves. For applications that do the "select()" themselves, or that don't need the timeout for polling (tcpdump, for example), doing a "select()" in libpcap just adds another system call to the code path. guy 2001-01-03 01:06:16 +0000
  • b542949711 Fix the description of "pcap_dispatch()" and "pcap_loop()" to reflect reality ("pcap_dispatch()", on a live capture, never reads more than one bufferful of packets). guy 2001-01-03 00:57:56 +0000
  • 70121e5b65 Note that the read timeout in "pcap_open_live()" does *NOT* guarantee that "pcap_dispatch()" will always return within that many milliseconds; some platforms don't support a read timeout, meaning the read timeout argument is ignored, and, on other platforms (SunOS 5.x and possibly SunOS 4.x and 3.x), the timer starts when the first packet arrives, so the timeout doesn't expire until at least one packet arrives. guy 2000-12-28 01:58:05 +0000
  • 042a2010bb Remove "stamp-h" and "stamp-h.in" on a "make distclean", as is done for tcpdump. guy 2000-12-23 20:06:15 +0000
  • 7574015989 It's a bit more convenient for Ethereal if the "sll_protocol" field is at the end of the link-layer header; put it there. guy 2000-12-23 07:50:18 +0000
  • 5d92f34251 Fix a typo. guy 2000-12-23 03:04:06 +0000
  • 1e22a6ef45 Put the LINUX_SLL_P_ definitions back, and check for at least some of them in "print-sll.c" - as a cooked-mode capture may be reading from non-Ethernet, non-802.x devices, it may well see some ETH_P_/LINUX_SLL_P_ types that don't mean "this is an 802.2 LLC frame". guy 2000-12-22 22:34:16 +0000
  • a4af073aa0 Check for "ippp" devices, as well as "isdn" and "isdY" devices, when deciding whether to punt to cooked mode. guy 2000-12-22 12:30:04 +0000
  • 54b14dde63 Just copy over the "sll_protocol" field - if it's not an Ethernet type, we just treat the frame as an LLC frame (if we care about Novell IPX-over-raw-802.3 frames, we'd have to handle them by checking for 0xFFFF as the first word - but we'd also have to do that when dissecting Ethernet frames). guy 2000-12-22 12:24:20 +0000
  • dba6f764bb Update a comment. guy 2000-12-22 12:14:48 +0000