dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Guy Harris 4380c64a7d Update to the new style, wherein each capture type has its own
pcap_create() routine, and pcap_activate() calls through the activate_op
pointer in a pcap_t.
2009-02-14 14:13:52 -08:00
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Added a couple missing definitions. 2008-12-21 10:18:10 +00:00
bpf/net Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos From Gisle Vanem: 2008-04-22 17:20:25 +00:00
packaging On Linux (and other platforms using the V7 man page conventions), we 2008-10-27 20:50:56 +00:00
pcap Update CHANGES for USB fixes. 2008-12-23 20:13:29 +00:00
.cvsignore More files to ignore. 2008-10-23 22:14:38 +00:00
CHANGES Update CHANGES for USB fixes. 2008-12-23 20:13:29 +00:00
CREDITS From Tobias Poschwatta: correctly check the requested packet directions 2009-02-14 13:19:13 -08:00
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 2008-06-12 20:21:51 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in Install headers unconditionally. 2008-11-22 17:30:24 +00:00
README Another genericize-the-version-number change. 2008-12-14 19:44:14 +00:00
README.Win32 Added a readme that explains how to compile libpcap under win32. 2002-08-09 13:55:12 +00:00
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
README.dag From Stephen Donnelly: 2006-04-07 07:07:25 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 2001-07-29 18:25:46 +00:00
README.macosx Update README.macosx to talk about the launchd daemon, and to give more 2008-06-07 18:53:31 +00:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:27:07 +00:00
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO No, that's not the right fix for the Linux kernel interface; the right 2006-10-04 18:16:20 +00:00
VERSION Libpcap is at 1.x, it's tcpdump that's at 4.x. 2008-11-21 19:19:02 +00:00
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 2001-11-12 22:18:01 +00:00
aclocal.m4 From Peter Volkov: 2008-11-18 07:29:48 +00:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 2007-10-22 19:28:58 +00:00
bpf_dump.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
bpf_image.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 2008-05-28 02:14:10 +00:00
config.guess Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
config.h.in From Jon Smirl: when we start capturing, send GET DESCRIPTOR requests to 2008-12-23 20:49:26 +00:00
config.sub Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
configure From Jon Smirl: when we start capturing, send GET DESCRIPTOR requests to 2008-12-23 20:49:26 +00:00
configure.in From Jon Smirl: when we start capturing, send GET DESCRIPTOR requests to 2008-12-23 20:49:26 +00:00
dlpisubs.c From Albert Chin: define DL_IPATM and MAXDLBUF, just as is done in 2008-12-02 16:40:19 +00:00
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
etherent.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:06:58 +00:00
fad-getad.c From RCB-ISIS on SourceForge: handle LynxOS, which has AF_PACKET but 2007-09-14 00:44:54 +00:00
fad-gifc.c We shouldn't need to include <sys/file.h>, and, as I remember, it caused 2008-08-06 07:34:09 +00:00
fad-glifc.c From Sagun Shakya: fix typoes in comments. 2008-01-30 09:35:48 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 2007-09-25 20:34:36 +00:00
filtertest.c We're building with the current version of libpcap, so we know we have 2005-08-08 17:50:13 +00:00
findalldevstest.c Add another test program, based on the test program for 2005-08-10 06:19:05 +00:00
gencode.c Update CHANGES for USB fixes. 2008-12-23 20:13:29 +00:00
gencode.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
grammar.y Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
inet.c Expand a comment with more information on getting interface names. 2008-04-20 18:19:02 +00:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 2007-10-16 11:35:53 +00:00
nametoaddr.c From Arien Vijn: support various notions for MAC addresses. 2008-02-06 10:21:30 +00:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 2008-06-05 08:10:59 +00:00
pcap-bpf.c Only set the cleanup and set/get nonblocking mode handlers to the 2008-09-16 18:42:29 +00:00
pcap-bpf.h Add RCS IDs. 2007-04-01 21:43:55 +00:00
pcap-bt-linux.c Get rid of declaration of non-existent routine. 2008-07-01 07:05:54 +00:00
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-config.1 Add a pcap-config script, to handle necessary -I/-L flags and any 2008-09-23 18:04:01 +00:00
pcap-config.in Add a pcap-config script, to handle necessary -I/-L flags and any 2008-09-23 18:04:01 +00:00
pcap-dag.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-dag.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-dlpi.c From Albert Chin: the "ss" variable is defined only if bufmod is 2008-12-02 16:20:23 +00:00
pcap-dos.c From Gisle Vanem: 2008-04-22 17:16:30 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap-filter.manmisc.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap-int.h Zero-copy BPF support, from Christian Peron. 2008-09-16 00:20:23 +00:00
pcap-libdlpi.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-linktype.manmisc.in Use a semicolon, rather than a comma, to separate the DLT_ and LINKTYPE_ 2008-10-27 22:52:30 +00:00
pcap-linux.c From Tobias Poschwatta: correctly check the requested packet directions 2009-02-14 13:19:13 -08:00
pcap-namedb.h Add a cautionary note to OS vendors here as well. 2006-10-04 18:13:32 +00:00
pcap-nit.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-null.c Update to the new style, wherein each capture type has its own 2009-02-14 14:13:52 -08:00
pcap-pf.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 2008-10-24 07:33:50 +00:00
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
pcap-sita.html SITA ACN support, from Fulko Hew. 2007-10-20 01:15:14 +00:00
pcap-snit.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-snoop.c From Albert Chin: fix a cut-and-pasteo. 2008-12-02 16:25:14 +00:00
pcap-stdinc.h Implemented pcap_hopen_offline(). This "internal" function allows us to 2008-10-06 15:27:32 +00:00
pcap-usb-linux.c Revert to defining the USB stuff ourselves; whether there's a 2009-01-03 12:12:12 -08:00
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-win32.c pcap_create() should accept UNICODE device names as well as ASCII ones 2008-05-21 22:15:25 +00:00
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap.c Update CHANGES for USB fixes. 2008-12-23 20:13:29 +00:00
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
pcap_activate.3pcap When activating a device, return PCAP_ERROR_IFACE_NOT_UP if the device 2008-07-01 08:02:33 +00:00
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_can_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_compile.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_datalink_name_to_val.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink_val_to_name.3pcap Fix the section number. (Thanks to the Debian and/or Ubuntu people who 2008-12-24 21:45:25 +00:00
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 2008-10-23 05:56:59 +00:00
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_fileno.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_findalldevs.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_free_datalinks.3pcap Add pcap_free_datalinks() - on Windows, something allocated in Vegas^Wa 2008-05-26 19:58:06 +00:00
pcap_freealldevs.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_get_selectable_fd.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_list_datalinks.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_loop.3pcap Another change from Debian. 2008-12-25 02:01:32 +00:00
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_offline.3pcap.in Add a man page describing the pcap file format. 2008-10-23 05:56:59 +00:00
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_datalink.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_stats.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 2008-04-09 21:39:21 +00:00
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 2008-04-05 20:26:56 +00:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 2007-12-31 03:38:39 +00:00
savefile.c Update CHANGES for USB fixes. 2008-12-23 20:13:29 +00:00
scanner.l From Arien Vijn: support various notions for MAC addresses. 2008-02-06 10:21:30 +00:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.34 2008-12-14 19:44:14 guy Exp $ (LBL)

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
	tcpdump-workers@lists.tcpdump.org

Anonymous CVS is available via:
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 1.x.y of LIBPCAP can be retrieved with the CVS tag "libpcap_1_{x}rel{y}":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_1_{x}rel{y} libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux 
and *BSD (and OS X).

It sets the soname of the library to "libpcap.so.1"; this is what it 
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as 
that.

We've been maintaining binary compatibility between libpcap releases for 
quite a while; there's no reason to tie a binary linked with libpcap to 
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org".  Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team