dect
/
libpcap
Archived
10
0
Fork 0
PCAP Library with DECT support
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
 
 
 
 
 
 
guy 174d9b71ca Add LINKTYPE_ names to the pcap-linktype man page, and include the 14 years ago
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 19 years ago
SUNOS4 Initial revision 24 years ago
Win32 malloc(strlen(X) + 1) followed by strcpy(result-of-malloc, str) is 15 years ago
bpf/net Make some arguments const pointers if that makes sense. 15 years ago
doc documentation for proposed pcap format 19 years ago
lbl Get rid of a bogus */ in the middle of a comment. 21 years ago
missing Move "snprintf.c" to the "missing" directory, as that's where 19 years ago
msdos From Gisle Vanem: 15 years ago
packaging packaging/pcap.spec is generated from packaging/pcap.spec.in; don't 15 years ago
pcap Implemented pcap_hopen_offline(). This "internal" function allows us to 15 years ago
.cvsignore More files to ignore. 14 years ago
CHANGES changes from 3.9 branch. 16 years ago
CREDITS Zero-copy BPF support, from Christian Peron. 15 years ago
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 15 years ago
LICENSE added license file 23 years ago
Makefile.in Speaking of dumb, that's a classic "useless cat"; just have sed read 14 years ago
README Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
README.Win32 Added a readme that explains how to compile libpcap under win32. 21 years ago
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
README.dag From Stephen Donnelly: 17 years ago
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 18 years ago
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 22 years ago
README.macosx Update README.macosx to talk about the launchd daemon, and to give more 15 years ago
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 18 years ago
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 22 years ago
TODO No, that's not the right fix for the Linux kernel interface; the right 17 years ago
VERSION Go with 0.9, not 1.0, for the next release. 19 years ago
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 22 years ago
aclocal.m4 Fix the rest of the $target_XXX to refer to $host_XXX - in autoconf 15 years ago
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 22 years ago
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 15 years ago
bpf_dump.c Make some arguments const pointers if that makes sense. 15 years ago
bpf_image.c Make some arguments const pointers if that makes sense. 15 years ago
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 15 years ago
config.guess Latest config.guess and config.sub from 19 years ago
config.h.in Zero-copy BPF support, from Christian Peron. 15 years ago
config.sub Latest config.guess and config.sub from 19 years ago
configure In the big "host OS" switch, put the names in alphabetical order, and 14 years ago
configure.in In the big "host OS" switch, put the names in alphabetical order, and 14 years ago
dlpisubs.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
etherent.c Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 18 years ago
fad-getad.c From RCB-ISIS on SourceForge: handle LynxOS, which has AF_PACKET but 16 years ago
fad-gifc.c We shouldn't need to include <sys/file.h>, and, as I remember, it caused 15 years ago
fad-glifc.c From Sagun Shakya: fix typoes in comments. 15 years ago
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 19 years ago
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 16 years ago
filtertest.c We're building with the current version of libpcap, so we know we have 18 years ago
findalldevstest.c Add another test program, based on the test program for 18 years ago
gencode.c Link-layer type for 802.15.4 with PHY-level preamble, SFD, and frame 15 years ago
gencode.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
grammar.y Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
inet.c Expand a comment with more information on getting interface names. 15 years ago
install-sh Initial revision 24 years ago
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 22 years ago
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 16 years ago
nametoaddr.c From Arien Vijn: support various notions for MAC addresses. 15 years ago
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 20 years ago
optimize.c Make some arguments const pointers if that makes sense. 15 years ago
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 15 years ago
pcap-bpf.c Only set the cleanup and set/get nonblocking mode handlers to the 15 years ago
pcap-bpf.h Add RCS IDs. 16 years ago
pcap-bt-linux.c Get rid of declaration of non-existent routine. 15 years ago
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-config.1 Add a pcap-config script, to handle necessary -I/-L flags and any 15 years ago
pcap-config.in Add a pcap-config script, to handle necessary -I/-L flags and any 15 years ago
pcap-dag.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-dag.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-dlpi.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-dos.c From Gisle Vanem: 15 years ago
pcap-dos.h From Gisle Vanem: MS-DOS support. 18 years ago
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap-filter.manmisc.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap-int.h Zero-copy BPF support, from Christian Peron. 15 years ago
pcap-libdlpi.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-linktype.manmisc.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 14 years ago
pcap-linux.c A pile of comments, from looking at aircrack-ng's airmon-ng, and 15 years ago
pcap-namedb.h Add a cautionary note to OS vendors here as well. 17 years ago
pcap-nit.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-null.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-pf.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 14 years ago
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
pcap-sita.html SITA ACN support, from Fulko Hew. 15 years ago
pcap-snit.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-snoop.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-stdinc.h Implemented pcap_hopen_offline(). This "internal" function allows us to 15 years ago
pcap-usb-linux.c Fix typoes (sigh, using both "p" and "handle" for the pcap_t pointer in 15 years ago
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-win32.c pcap_create() should accept UNICODE device names as well as ASCII ones 15 years ago
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap.c Link-layer type for 802.15.4 with PHY-level preamble, SFD, and frame 15 years ago
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
pcap_activate.3pcap When activating a device, return PCAP_ERROR_IFACE_NOT_UP if the device 15 years ago
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_can_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_compile.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_datalink_name_to_val.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink_val_to_name.3pcap Get rid of the AUTHORS and BUGS section; only the main pcap(3PCAP) man 15 years ago
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 14 years ago
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_fileno.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_findalldevs.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_free_datalinks.3pcap Add pcap_free_datalinks() - on Windows, something allocated in Vegas^Wa 15 years ago
pcap_freealldevs.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_get_selectable_fd.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_list_datalinks.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_loop.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 15 years ago
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_open_offline.3pcap.in Add a man page describing the pcap file format. 14 years ago
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_datalink.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 15 years ago
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_stats.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 15 years ago
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 18 years ago
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 15 years ago
savefile.c Implemented pcap_hopen_offline(). This "internal" function allows us to 15 years ago
scanner.l From Arien Vijn: support various notions for MAC addresses. 15 years ago
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 21 years ago

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.32 2008-05-30 01:43:21 guy Exp $ (LBL)

LIBPCAP 0.9
Now maintained by "The Tcpdump Group"
See www.tcpdump.org

Please send inquiries/comments/reports to:
tcpdump-workers@lists.tcpdump.org

Anonymous CVS is available via:
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
(password "anoncvs")
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.9 of LIBPCAP can be retrieved with the CVS tag "libpcap_0_9rel1":
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_9rel1 libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from Lawrence Berkeley National Laboratory
Network Research Group <libpcap@ee.lbl.gov>
ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture. libpcap provides a portable
framework for low-level network monitoring. Applications include
network statistics collection, security monitoring, network debugging,
etc. Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter. BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''. A compressed PostScript version can be
found at

ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters). Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD. DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes). Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org". Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

- The TCPdump team