dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Guy Harris 6b414c082f Describe all the cases where pcap_fileno() returns a file descriptor and
where it returns -1.  Based on a patch from Fumiyuki Shimizu.
2009-11-03 14:18:11 -08:00
ChmodBPF To quote 2009-09-09 16:50:36 -07:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Added a bunch of #ifdef directives to make wpcap.dll (WinPcap) compile under cygwin. 2009-07-16 15:46:55 -07:00
bpf/net Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos From Gisle Vanem: 2008-04-22 17:20:25 +00:00
packaging On Linux (and other platforms using the V7 man page conventions), we 2008-10-27 20:50:56 +00:00
pcap Add DLT_CAN_SOCKETCAN, for capturing on the Controller Area Network with 2009-10-11 10:16:21 -07:00
.cvsignore More files to ignore. 2008-10-23 22:14:38 +00:00
.gitignore seltest was renamed selpolltest. 2009-07-30 20:58:34 -07:00
CHANGES fixed date and added note about updates to pcap-dag 2009-05-06 14:16:31 -04:00
CREDITS Describe all the cases where pcap_fileno() returns a file descriptor and 2009-11-03 14:18:11 -08:00
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 2008-06-12 20:21:51 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in Add opentest.c to the list of files to put into the source tarball. 2009-08-11 21:38:06 -07:00
README Slight update to the item about shared libraries, now that we support 2009-04-21 09:11:06 -07:00
README.Win32 Added a readme that explains how to compile libpcap under win32. 2002-08-09 13:55:12 +00:00
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
README.dag From Stephen Donnelly: 2006-04-07 07:07:25 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux Note that libpcap links with libnl by default - and that this shouldn't 2009-07-15 14:19:13 -07:00
README.macosx Put in a note about the Snow Leopard bug that requires that you have BPF 2009-09-09 17:36:06 -07:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:27:07 +00:00
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO No, that's not the right fix for the Linux kernel interface; the right 2006-10-04 18:16:20 +00:00
VERSION Libpcap is at 1.x, it's tcpdump that's at 4.x. 2008-11-21 19:19:02 +00:00
aclocal.m4 Check for the intN_t and u_intN_t types the same way we do for tcpdump; 2009-07-08 01:10:18 -07:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 2007-10-22 19:28:58 +00:00
bpf_dump.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
bpf_image.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 2008-05-28 02:14:10 +00:00
config.guess Extend the scheme for building .so files to support Sun C and Sun's 2009-04-21 09:09:37 -07:00
config.h.in Work around an annoying Snow Leopard BPF bug that causes sub-second 2009-10-11 11:05:46 -07:00
config.sub Extend the scheme for building .so files to support Sun C and Sun's 2009-04-21 09:09:37 -07:00
configure Work around an annoying Snow Leopard BPF bug that causes sub-second 2009-10-11 11:05:46 -07:00
configure.in Work around an annoying Snow Leopard BPF bug that causes sub-second 2009-10-11 11:05:46 -07:00
dlpisubs.c Don't define pcap_stream_err() if we're not going to use it. 2009-06-29 00:50:19 -07:00
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
etherent.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:06:58 +00:00
fad-getad.c From RCB-ISIS on SourceForge: handle LynxOS, which has AF_PACKET but 2007-09-14 00:44:54 +00:00
fad-gifc.c We shouldn't need to include <sys/file.h>, and, as I remember, it caused 2008-08-06 07:34:09 +00:00
fad-glifc.c From Sagun Shakya: fix typoes in comments. 2008-01-30 09:35:48 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 2007-09-25 20:34:36 +00:00
filtertest.c We're building with the current version of libpcap, so we know we have 2005-08-08 17:50:13 +00:00
findalldevstest.c Add another test program, based on the test program for 2005-08-10 06:19:05 +00:00
gencode.c Add DLT_CAN_SOCKETCAN, for capturing on the Controller Area Network with 2009-10-11 10:16:21 -07:00
gencode.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
grammar.y The SUSv3 says ntoh* and hton* are declared in <arpa/inet.h> and, on 2009-07-07 11:42:22 -07:00
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
inet.c From Roman Francoise: rename the USB-sniffing devices to "usbmonN", so 2009-03-19 09:37:03 -07:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 2007-10-16 11:35:53 +00:00
nametoaddr.c From Gisle Vanem: 2009-02-14 14:36:34 -08:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
opentest.c Add a program for testing both the old (pcap_open_live()) and new 2009-08-11 21:37:18 -07:00
optimize.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 2008-06-05 08:10:59 +00:00
pcap-bpf.c If bpf_odmcleanup() is being called to clean up after an error, pass it 2009-10-12 12:58:30 -07:00
pcap-bpf.h Add RCS IDs. 2007-04-01 21:43:55 +00:00
pcap-bt-linux.c Get rid of declaration of non-existent routine. 2008-07-01 07:05:54 +00:00
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-config.1 Add a --additional-libs flag to pcap-config, to write out any additional 2009-05-22 16:04:25 -07:00
pcap-config.in Oops, close a quote. 2009-06-09 10:56:41 -07:00
pcap-dag.c handle->md.stat should be zeroed out when we initially allocated the 2009-09-07 16:48:26 -07:00
pcap-dag.h Updating Endace DAG ERF support. 2009-05-04 16:32:52 +12:00
pcap-dlpi.c dlp->dl_length might be an unsigned long; cast it to unsigned long and 2009-07-02 12:28:51 -07:00
pcap-dos.c From Gisle Vanem: 2008-04-22 17:16:30 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap-filter.manmisc.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap-int.h From Dustin Spicuzza: support ps_ifdrop on Linux, using /proc/net/dev. 2009-09-07 16:23:15 -07:00
pcap-libdlpi.c From Sebastien Roy: fix compilation problems on versions of Solaris with 2009-02-26 01:16:26 -08:00
pcap-linktype.manmisc.in Use a semicolon, rather than a comma, to separate the DLT_ and LINKTYPE_ 2008-10-27 22:52:30 +00:00
pcap-linux.c Fix typo^Wbraino. 2009-10-12 17:06:11 -07:00
pcap-namedb.h Add a cautionary note to OS vendors here as well. 2006-10-04 18:13:32 +00:00
pcap-nit.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-null.c Update to the new style, wherein each capture type has its own 2009-02-14 14:13:52 -08:00
pcap-pf.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 2008-10-24 07:33:50 +00:00
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
pcap-sita.html SITA ACN support, from Fulko Hew. 2007-10-20 01:15:14 +00:00
pcap-snit.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-snoop.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-stdinc.h Added an #ifdef directive to allow compiling the WinPcap samples with VC2008. 2009-07-16 15:09:15 -07:00
pcap-usb-linux.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-win32.c Removed some leftover tracing messages. 2009-07-15 13:30:41 -07:00
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap.c Add DLT_CAN_SOCKETCAN, for capturing on the Controller Area Network with 2009-10-11 10:16:21 -07:00
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
pcap_activate.3pcap When activating a device, return PCAP_ERROR_IFACE_NOT_UP if the device 2008-07-01 08:02:33 +00:00
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_can_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_compile.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_datalink_name_to_val.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink_val_to_name.3pcap Fix the section number. (Thanks to the Debian and/or Ubuntu people who 2008-12-24 21:45:25 +00:00
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 2008-10-23 05:56:59 +00:00
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_fileno.3pcap Describe all the cases where pcap_fileno() returns a file descriptor and 2009-11-03 14:18:11 -08:00
pcap_findalldevs.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_free_datalinks.3pcap Add pcap_free_datalinks() - on Windows, something allocated in Vegas^Wa 2008-05-26 19:58:06 +00:00
pcap_freealldevs.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_get_selectable_fd.3pcap Give N. Leiten credit for the poll() exceptional condition checks in 2009-10-12 17:21:02 -07:00
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_list_datalinks.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_loop.3pcap Another change from Debian. 2008-12-25 02:01:32 +00:00
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_offline.3pcap.in Add a man page describing the pcap file format. 2008-10-23 05:56:59 +00:00
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_datalink.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_stats.3pcap From Dustin Spicuzza: support ps_ifdrop on Linux, using /proc/net/dev. 2009-09-07 16:23:15 -07:00
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 2008-04-09 21:39:21 +00:00
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 2008-04-05 20:26:56 +00:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 2007-12-31 03:38:39 +00:00
savefile.c Add DLT_CAN_SOCKETCAN, for capturing on the Controller Area Network with 2009-10-11 10:16:21 -07:00
scanner.l If we have lex but not flex, we assign a "const char *" to "in_buffer"; 2009-05-24 13:22:03 -07:00
selpolltest.c Add the -p flag to the usage message. 2009-07-30 20:32:04 -07:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.34 2008-12-14 19:44:14 guy Exp $ (LBL)

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
	tcpdump-workers@lists.tcpdump.org

Anonymous CVS is available via:
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 1.x.y of LIBPCAP can be retrieved with the CVS tag "libpcap_1_{x}rel{y}":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_1_{x}rel{y} libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux 
and *BSD, among other platforms.

It sets the soname of the library to "libpcap.so.1"; this is what it 
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as 
that.

We've been maintaining binary compatibility between libpcap releases for 
quite a while; there's no reason to tie a binary linked with libpcap to 
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org".  Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team