dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
guy 619a9fe31b For devices that we have some reason to believe are real live Ethernet
devices, offer DLT_DOCSIS as one of the choices of link-layer type, and
support setting that type as meaning just "set libpcap's notion of the
link-layer type to DLT_DOCSIS" without telling the driver to use
DLT_DOCSIS.
2003-12-18 23:32:31 +00:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Add "/D _U_=" to make _U_ expand to nothing. 2003-11-15 23:37:07 +00:00
bpf/net Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
packaging patches to make building RPMs and shared libraries easier. 2003-11-30 04:45:02 +00:00
.cvsignore From Motonori Shindo: version.h is a generated file, ignore it when 2003-03-01 05:04:40 +00:00
CHANGES CHANGES files for 0.8. 2003-11-13 01:59:15 +00:00
CREDITS From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
FILES Get rid of a trailing blank line from the previous checkin. 2003-12-15 01:53:39 +00:00
INSTALL.txt Add some missing entries, and fix an entry. 2003-12-15 02:04:14 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
README update CVS instructions to 0.8. 2003-11-13 01:57:10 +00:00
README.Win32 Added a readme that explains how to compile libpcap under win32. 2002-08-09 13:55:12 +00:00
README.aix From Shaun Clowes: update the to reflect the fact that it should now 2003-04-17 06:32:37 +00:00
README.dag Check in Jesper Peterson's README.dag file, unintentionally left out of 2003-07-24 08:02:34 +00:00
README.hpux Add a note that Rick Jones reports that HP-UX 11i needs no patches for 2002-06-29 04:39:03 +00:00
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 2001-07-29 18:25:46 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO Documentation fixes from Chris Pepper <pepper@mail.reppep.com>. 2001-06-05 03:45:53 +00:00
VERSION Crank the version up to 0.8, as that's what the next release from this 2002-08-02 04:42:51 +00:00
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 2001-11-12 22:18:01 +00:00
aclocal.m4 From Brian Ginsbach: add the Cray NV1 CPU to the list of CPUs that don't 2003-11-16 09:45:31 +00:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00
bpf_dump.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
bpf_image.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
config.guess Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
config.h.in From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
config.sub Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
configure From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
configure.in From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
etherent.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
ethertype.h I've seen captures with all four different flavors of IPX frames on 2001-01-14 21:26:52 +00:00
fad-getad.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-gifc.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-glifc.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-win32.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
gencode.c Put in very minimal support for DLT_LINUX_IRDA filters. 2003-12-18 20:36:11 +00:00
gencode.h The value pointed to by "gen_pf_ifname()"'s argument isn't modified, so 2003-05-02 08:37:43 +00:00
grammar.y On Mac OS X 10.3, including <sys/socket.h> eventually drags in a header 2003-12-16 05:19:56 +00:00
inet.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep Initial revision 1999-10-07 23:46:40 +00:00
nametoaddr.c Typo fix from Brian Ginsbach. 2003-11-19 18:14:18 +00:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-bpf.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-bpf.h Reserve two DLT_ values for IBM's use. 2003-12-03 21:34:21 +00:00
pcap-dag.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-dag.h Add a "read" function pointer to the pcap_t structure, which handles 2003-07-25 05:32:02 +00:00
pcap-dlpi.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-enet.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-int.h From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
pcap-linux.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-namedb.h Pick up, from the FreeBSD libpcap, changes to surround all declarations with 2000-07-29 07:36:41 +00:00
pcap-nit.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-nit.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-pf.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-pf.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-snit.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-snoop.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap-stdinc.h Avoids a compiler warning in case _WINSOCKAPI_ was already defined (someone defined _WINSOCKAPI_ when including 'windows.h', in order * to prevent it from including 'winsock.h') 2003-09-25 15:59:42 +00:00
pcap-win32.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap.3 Note that "pcap_breakloop()" won't break another thread out of a 2003-12-01 02:43:45 +00:00
pcap.c For devices that we have some reason to believe are real live Ethernet 2003-12-18 23:32:31 +00:00
pcap.h Add a "pcap_get_selectable_fd()" API to get an FD on which you can do a 2003-11-21 10:19:33 +00:00
pf.h Add support for OpenBSD DLT_PFLOG. 2003-03-11 06:23:52 +00:00
ppp.h IPv6 packet filtering code. 1999-10-19 15:18:28 +00:00
rawss7.h renamed rawssw7 to rawss7.h 2003-09-10 19:55:36 +00:00
savefile.c Reserve two DLT_ values for IBM's use. 2003-12-03 21:34:21 +00:00
scanner.l On Mac OS X 10.3, including <sys/socket.h> eventually drags in a header 2003-12-16 05:19:56 +00:00
sll.h whitespace cleanup 2002-06-11 17:04:44 +00:00
snprintf.c From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.28 2003-11-13 01:57:10 mcr Exp $ (LBL)

LIBPCAP 0.8
Now maintained by "The Tcpdump Group"
See 		www.tcpdump.org

Please send inquiries/comments/reports to 	tcpdump-workers@tcpdump.org

Anonymous CVS is available via:
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.8 of LIBPCAP can be retrieved with the CVS tag "libpcap_0_8rel1":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_8rel1 libpcap

Please send patches against the master copy to patches@tcpdump.org.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@tcpdump.org".  Bugs, support requests,
and feature requests may also be submitted on the SourceForge site for
libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
"patches@tcpdump.org", or submitted as patches on the SourceForge site
for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team