dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
guy a590c21380 Add some PCAP_WARNING return values for "success, but you might want to
know that..."; currently, only pcap_activate() returns them, but we
might want some more warning returns for some other calls, such as the
ones that set filters.  It's a little cleaner than "clear out the error
message buffer and, if it's not empty after a successful return, it has
a warning", and a little cleaner than spewing a warning to the standard
error (as that might not be visible to the user if they're running a GUI
application).
2008-04-09 21:26:12 +00:00
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Added the prototype for inet_aton(). 2007-09-27 18:02:20 +00:00
bpf/net Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos Actually add the RCS ID claimed to be added by the previous checkin. 2004-12-19 19:47:01 +00:00
packaging From Joerg Mayer: add a new man page for the filter syntax, copied from 2008-01-06 21:14:16 +00:00
pcap Add some PCAP_WARNING return values for "success, but you might want to 2008-04-09 21:26:12 +00:00
.cvsignore Add a wrapper around Lex/Flex; that lets us handle Lex's lack of support 2007-12-30 00:28:17 +00:00
CHANGES changes from 3.9 branch. 2007-07-24 02:25:19 +00:00
CREDITS From Hagen Paul Pfeifer: define some routines as static, to match the 2008-02-08 01:34:49 +00:00
FILES Fix the pcap_datalink_val_to_name() man page. 2008-04-06 20:16:30 +00:00
INSTALL.txt Add in the new man pages. Just use a single generic entry in 2008-04-06 17:29:31 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in Make pcap_datalink_val_to_description.3pcap a link to 2008-04-06 20:22:13 +00:00
README Another update for the new version number. 2004-10-12 02:02:28 +00:00
README.Win32 Added a readme that explains how to compile libpcap under win32. 2002-08-09 13:55:12 +00:00
README.aix From Shaun Clowes: update the to reflect the fact that it should now 2003-04-17 06:32:37 +00:00
README.dag From Stephen Donnelly: 2006-04-07 07:07:25 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 2001-07-29 18:25:46 +00:00
README.macosx Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:27:07 +00:00
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO No, that's not the right fix for the Linux kernel interface; the right 2006-10-04 18:16:20 +00:00
VERSION Go with 0.9, not 1.0, for the next release. 2004-10-12 01:55:47 +00:00
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 2001-11-12 22:18:01 +00:00
aclocal.m4 Support for libdlpi, and for enabling "passive mode" on Solaris systems 2008-03-13 18:13:57 +00:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 2007-10-22 19:28:58 +00:00
bpf_dump.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
bpf_image.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
config.guess Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
config.h.in From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
config.sub Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
configure Clean up the output of the configure script a bit. 2008-04-05 05:20:48 +00:00
configure.in Clean up the output of the configure script a bit. 2008-04-05 04:56:47 +00:00
dlpisubs.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
etherent.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:06:58 +00:00
fad-getad.c From RCB-ISIS on SourceForge: handle LynxOS, which has AF_PACKET but 2007-09-14 00:44:54 +00:00
fad-gifc.c Checking whether the amount of data returned by SIOCGIFCONF is less than 2005-06-29 06:41:39 +00:00
fad-glifc.c From Sagun Shakya: fix typoes in comments. 2008-01-30 09:35:48 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 2007-09-25 20:34:36 +00:00
filtertest.c We're building with the current version of libpcap, so we know we have 2005-08-08 17:50:13 +00:00
findalldevstest.c Add another test program, based on the test program for 2005-08-10 06:19:05 +00:00
gencode.c The Prism header is in theory variable-length, but in practice it's 2007-12-29 23:15:04 +00:00
gencode.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
grammar.y Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
inet.c Pick up changes from NetBSD: 2007-06-11 10:04:24 +00:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 2007-10-16 11:35:53 +00:00
nametoaddr.c From Arien Vijn: support various notions for MAC addresses. 2008-02-06 10:21:30 +00:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
pcap-bpf.c Add some PCAP_WARNING return values for "success, but you might want to 2008-04-09 21:26:12 +00:00
pcap-bpf.h Add RCS IDs. 2007-04-01 21:43:55 +00:00
pcap-bt-linux.c For Linux non-mmapped captures, Linux bluetooth captures, and Irix 2008-04-07 03:57:32 +00:00
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-dag.c From Stephen Donnelly: fix some compile errors from the conversion to 2008-04-08 03:00:14 +00:00
pcap-dag.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-dlpi.c Add some PCAP_WARNING return values for "success, but you might want to 2008-04-09 21:26:12 +00:00
pcap-dos.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap-filter.4 From Joerg Mayer: add a new man page for the filter syntax, copied from 2008-01-06 21:14:16 +00:00
pcap-int.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-libdlpi.c Add an error for "you don't have permission to open that device", as 2008-04-09 19:58:02 +00:00
pcap-linktype.4 Split the pcap(3) man page into a bunch of individual man pages for 2008-04-05 20:19:41 +00:00
pcap-linux.c Add some PCAP_WARNING return values for "success, but you might want to 2008-04-09 21:26:12 +00:00
pcap-namedb.h Add a cautionary note to OS vendors here as well. 2006-10-04 18:13:32 +00:00
pcap-nit.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-nit.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-null.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-pf.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-pf.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-septel.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-sita.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
pcap-sita.html SITA ACN support, from Fulko Hew. 2007-10-20 01:15:14 +00:00
pcap-snit.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-snoop.c For Linux non-mmapped captures, Linux bluetooth captures, and Irix 2008-04-07 03:57:32 +00:00
pcap-stdinc.h Added the definition of strdup as _strdup under VC6. 2007-09-27 17:59:45 +00:00
pcap-usb-linux.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-win32.c Fixed a compilation error under Windows. Some code left while porting the 2008-04-09 21:20:26 +00:00
pcap.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap.c Add some PCAP_WARNING return values for "success, but you might want to 2008-04-09 21:26:12 +00:00
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap1.h Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap_activate.3pcap Add some PCAP_WARNING return values for "success, but you might want to 2008-04-09 21:26:12 +00:00
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_can_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_compile.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink_name_to_val.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink_val_to_name.3pcap Fix the pcap_datalink_val_to_name() man page. 2008-04-06 20:16:30 +00:00
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_open.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_errtostr.3pcap Have a separate pcap_errtostr() routine to turn PCAP_ERROR_ values to 2008-04-06 19:55:32 +00:00
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_fileno.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_findalldevs.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_freealldevs.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_get_selectable_fd.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_list_datalinks.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_loop.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_dead.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_offline.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_datalink.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setfilter.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_stats.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 2008-04-05 20:26:56 +00:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 2007-12-31 03:38:39 +00:00
savefile.c Add more data types for X2E, requested by Hannes Kaelber. 2008-04-06 18:09:48 +00:00
scanner.l From Arien Vijn: support various notions for MAC addresses. 2008-02-06 10:21:30 +00:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.30 2004-10-12 02:02:28 guy Exp $ (LBL)

LIBPCAP 0.9
Now maintained by "The Tcpdump Group"
See 		www.tcpdump.org

Please send inquiries/comments/reports to 	tcpdump-workers@tcpdump.org

Anonymous CVS is available via:
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.9 of LIBPCAP can be retrieved with the CVS tag "libpcap_0_9rel1":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_9rel1 libpcap

Please send patches against the master copy to patches@tcpdump.org.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@tcpdump.org".  Bugs, support requests,
and feature requests may also be submitted on the SourceForge site for
libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
"patches@tcpdump.org", or submitted as patches on the SourceForge site
for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team