dect
/
libpcap
Archived
10
0
Fork 0
PCAP Library with DECT support
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
 
 
 
 
 
 
Guy Harris 4da1fd6159 Add a --additional-libs flag to pcap-config, to write out any additional 14 years ago
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 19 years ago
SUNOS4 Initial revision 24 years ago
Win32 Added a couple missing definitions. 14 years ago
bpf/net Make some arguments const pointers if that makes sense. 15 years ago
doc documentation for proposed pcap format 19 years ago
lbl Get rid of a bogus */ in the middle of a comment. 21 years ago
missing Move "snprintf.c" to the "missing" directory, as that's where 19 years ago
msdos From Gisle Vanem: 15 years ago
packaging On Linux (and other platforms using the V7 man page conventions), we 14 years ago
pcap provided DLT_AOS to eric.lidwa-1@nasa.gov 14 years ago
.cvsignore More files to ignore. 14 years ago
.gitignore Add some more generated files. 14 years ago
CHANGES fixed date and added note about updates to pcap-dag 14 years ago
CREDITS From Robert Edmonds: in the lexical analyzer, free up any addrinfo 14 years ago
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 15 years ago
LICENSE added license file 23 years ago
Makefile.in Extend the scheme for building .so files to support Sun C and Sun's 14 years ago
README Slight update to the item about shared libraries, now that we support 14 years ago
README.Win32 Added a readme that explains how to compile libpcap under win32. 21 years ago
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
README.dag From Stephen Donnelly: 17 years ago
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 18 years ago
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 22 years ago
README.macosx Update README.macosx to talk about the launchd daemon, and to give more 15 years ago
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 18 years ago
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 22 years ago
TODO No, that's not the right fix for the Linux kernel interface; the right 17 years ago
VERSION Libpcap is at 1.x, it's tcpdump that's at 4.x. 14 years ago
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 22 years ago
aclocal.m4 Fix a typo. 14 years ago
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 22 years ago
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 15 years ago
bpf_dump.c Make some arguments const pointers if that makes sense. 15 years ago
bpf_image.c Make some arguments const pointers if that makes sense. 15 years ago
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 15 years ago
config.guess Extend the scheme for building .so files to support Sun C and Sun's 14 years ago
config.h.in From Jon Smirl: when we start capturing, send GET DESCRIPTOR requests to 14 years ago
config.sub Extend the scheme for building .so files to support Sun C and Sun's 14 years ago
configure Extend the scheme for building .so files to support Sun C and Sun's 14 years ago
configure.in Extend the scheme for building .so files to support Sun C and Sun's 14 years ago
dlpisubs.c From Albert Chin: define DL_IPATM and MAXDLBUF, just as is done in 14 years ago
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
etherent.c Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 18 years ago
fad-getad.c From RCB-ISIS on SourceForge: handle LynxOS, which has AF_PACKET but 16 years ago
fad-gifc.c We shouldn't need to include <sys/file.h>, and, as I remember, it caused 15 years ago
fad-glifc.c From Sagun Shakya: fix typoes in comments. 15 years ago
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 19 years ago
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 16 years ago
filtertest.c We're building with the current version of libpcap, so we know we have 18 years ago
findalldevstest.c Add another test program, based on the test program for 18 years ago
gencode.c From Robert Edmonds: in the lexical analyzer, free up any addrinfo 14 years ago
gencode.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
grammar.y Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
inet.c From Roman Francoise: rename the USB-sniffing devices to "usbmonN", so 14 years ago
install-sh Initial revision 24 years ago
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 22 years ago
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 16 years ago
nametoaddr.c From Gisle Vanem: 14 years ago
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 20 years ago
optimize.c Make some arguments const pointers if that makes sense. 15 years ago
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 15 years ago
pcap-bpf.c From Darren Reed: some changes to support BPF on Solaris. Update his 14 years ago
pcap-bpf.h Add RCS IDs. 16 years ago
pcap-bt-linux.c Get rid of declaration of non-existent routine. 15 years ago
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-config.1 Add a --additional-libs flag to pcap-config, to write out any additional 14 years ago
pcap-config.in Add a --additional-libs flag to pcap-config, to write out any additional 14 years ago
pcap-dag.c Updating Endace DAG ERF support. 14 years ago
pcap-dag.h Updating Endace DAG ERF support. 14 years ago
pcap-dlpi.c From Albert Chin: the "ss" variable is defined only if bufmod is 14 years ago
pcap-dos.c From Gisle Vanem: 15 years ago
pcap-dos.h From Gisle Vanem: MS-DOS support. 18 years ago
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap-filter.manmisc.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap-int.h Move "union thdr" to pcap-int.h, as we use it in pcap-int.h. 14 years ago
pcap-libdlpi.c From Sebastien Roy: fix compilation problems on versions of Solaris with 14 years ago
pcap-linktype.manmisc.in Use a semicolon, rather than a comma, to separate the DLT_ and LINKTYPE_ 14 years ago
pcap-linux.c From a quick look at the hostap driver, it appears that newer versions 14 years ago
pcap-namedb.h Add a cautionary note to OS vendors here as well. 17 years ago
pcap-nit.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-null.c Update to the new style, wherein each capture type has its own 14 years ago
pcap-pf.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 14 years ago
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
pcap-sita.html SITA ACN support, from Fulko Hew. 15 years ago
pcap-snit.c Turn close_op into cleanup_op; the routine that handles it can also be 15 years ago
pcap-snoop.c From Albert Chin: fix a cut-and-pasteo. 14 years ago
pcap-stdinc.h From Gisle Vanem: 14 years ago
pcap-usb-linux.c From Roman Francoise: rename the USB-sniffing devices to "usbmonN", so 14 years ago
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-win32.c pcap_create() should accept UNICODE device names as well as ASCII ones 15 years ago
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap.c Update CHANGES for USB fixes. 14 years ago
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 15 years ago
pcap_activate.3pcap When activating a device, return PCAP_ERROR_IFACE_NOT_UP if the device 15 years ago
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_can_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_compile.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_datalink_name_to_val.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink_val_to_name.3pcap Fix the section number. (Thanks to the Debian and/or Ubuntu people who 14 years ago
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 14 years ago
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_fileno.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_findalldevs.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_free_datalinks.3pcap Add pcap_free_datalinks() - on Windows, something allocated in Vegas^Wa 15 years ago
pcap_freealldevs.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_get_selectable_fd.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_list_datalinks.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_loop.3pcap Another change from Debian. 14 years ago
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 15 years ago
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 14 years ago
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_open_offline.3pcap.in Add a man page describing the pcap file format. 14 years ago
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_datalink.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 15 years ago
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_stats.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 15 years ago
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 18 years ago
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 15 years ago
savefile.c Reject an attempt to pass an inactivated pcap_t to pcap_dump_open(), as 14 years ago
scanner.l From Robert Edmonds: in the lexical analyzer, free up any addrinfo 14 years ago
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 21 years ago

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.34 2008-12-14 19:44:14 guy Exp $ (LBL)

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
tcpdump-workers@lists.tcpdump.org

Anonymous CVS is available via:
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
(password "anoncvs")
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 1.x.y of LIBPCAP can be retrieved with the CVS tag "libpcap_1_{x}rel{y}":
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_1_{x}rel{y} libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from Lawrence Berkeley National Laboratory
Network Research Group <libpcap@ee.lbl.gov>
ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture. libpcap provides a portable
framework for low-level network monitoring. Applications include
network statistics collection, security monitoring, network debugging,
etc. Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter. BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''. A compressed PostScript version can be
found at

ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters). Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD. DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes). Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux
and *BSD, among other platforms.

It sets the soname of the library to "libpcap.so.1"; this is what it
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as
that.

We've been maintaining binary compatibility between libpcap releases for
quite a while; there's no reason to tie a binary linked with libpcap to
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org". Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

- The TCPdump team