dect
/
libpcap
Archived
10
0
Fork 0
PCAP Library with DECT support
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
 
 
 
 
 
 
guy c6aa29a8dc Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 19 years ago
SUNOS4 Initial revision 24 years ago
Win32 Added the prototype for inet_aton(). 16 years ago
bpf/net Make some arguments const pointers if that makes sense. 15 years ago
doc documentation for proposed pcap format 19 years ago
lbl Get rid of a bogus */ in the middle of a comment. 21 years ago
missing Move "snprintf.c" to the "missing" directory, as that's where 19 years ago
msdos Actually add the RCS ID claimed to be added by the previous checkin. 18 years ago
packaging From Joerg Mayer: add a new man page for the filter syntax, copied from 15 years ago
pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
.cvsignore Add a wrapper around Lex/Flex; that lets us handle Lex's lack of support 15 years ago
CHANGES changes from 3.9 branch. 16 years ago
CREDITS From Hagen Paul Pfeifer: define some routines as static, to match the 15 years ago
FILES Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
INSTALL.txt Add in the new man pages. Just use a single generic entry in 15 years ago
LICENSE added license file 23 years ago
Makefile.in Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
README Another update for the new version number. 19 years ago
README.Win32 Added a readme that explains how to compile libpcap under win32. 21 years ago
README.aix From Shaun Clowes: update the to reflect the fact that it should now 20 years ago
README.dag From Stephen Donnelly: 17 years ago
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 18 years ago
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 22 years ago
README.macosx Add an OS X startup item to set the permissions and/or ownership of the 19 years ago
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 18 years ago
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 22 years ago
TODO No, that's not the right fix for the Linux kernel interface; the right 17 years ago
VERSION Go with 0.9, not 1.0, for the next release. 19 years ago
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 22 years ago
aclocal.m4 Support for libdlpi, and for enabling "passive mode" on Solaris systems 15 years ago
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 22 years ago
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 15 years ago
bpf_dump.c Make some arguments const pointers if that makes sense. 15 years ago
bpf_image.c Make some arguments const pointers if that makes sense. 15 years ago
config.guess Latest config.guess and config.sub from 19 years ago
config.h.in From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
config.sub Latest config.guess and config.sub from 19 years ago
configure Clean up the output of the configure script a bit. 15 years ago
configure.in Clean up the output of the configure script a bit. 15 years ago
dlpisubs.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
etherent.c Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 18 years ago
fad-getad.c From RCB-ISIS on SourceForge: handle LynxOS, which has AF_PACKET but 16 years ago
fad-gifc.c Checking whether the amount of data returned by SIOCGIFCONF is less than 18 years ago
fad-glifc.c From Sagun Shakya: fix typoes in comments. 15 years ago
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 19 years ago
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 16 years ago
filtertest.c We're building with the current version of libpcap, so we know we have 18 years ago
findalldevstest.c Add another test program, based on the test program for 18 years ago
gencode.c The Prism header is in theory variable-length, but in practice it's 15 years ago
gencode.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
grammar.y Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 15 years ago
inet.c Pick up changes from NetBSD: 16 years ago
install-sh Initial revision 24 years ago
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 22 years ago
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 16 years ago
nametoaddr.c From Arien Vijn: support various notions for MAC addresses. 15 years ago
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 20 years ago
optimize.c Make some arguments const pointers if that makes sense. 15 years ago
pcap-bpf.c Add some PCAP_WARNING return values for "success, but you might want to 15 years ago
pcap-bpf.h Add RCS IDs. 16 years ago
pcap-bt-linux.c For Linux non-mmapped captures, Linux bluetooth captures, and Irix 15 years ago
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-dag.c From Stephen Donnelly: fix some compile errors from the conversion to 15 years ago
pcap-dag.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-dlpi.c Add some PCAP_WARNING return values for "success, but you might want to 15 years ago
pcap-dos.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-dos.h From Gisle Vanem: MS-DOS support. 18 years ago
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap-filter.4 From Joerg Mayer: add a new man page for the filter syntax, copied from 15 years ago
pcap-int.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-libdlpi.c Add an error for "you don't have permission to open that device", as 15 years ago
pcap-linktype.4 Split the pcap(3) man page into a bunch of individual man pages for 15 years ago
pcap-linux.c Add some PCAP_WARNING return values for "success, but you might want to 15 years ago
pcap-namedb.h Add a cautionary note to OS vendors here as well. 17 years ago
pcap-nit.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-nit.h Initial revision 24 years ago
pcap-null.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-pf.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-pf.h Initial revision 24 years ago
pcap-septel.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-sita.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 15 years ago
pcap-sita.html SITA ACN support, from Fulko Hew. 16 years ago
pcap-snit.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-snoop.c For Linux non-mmapped captures, Linux bluetooth captures, and Irix 15 years ago
pcap-stdinc.h Added the definition of strdup as _strdup under VC6. 16 years ago
pcap-usb-linux.c From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 15 years ago
pcap-win32.c Fixed a compilation error under Windows. Some code left while porting the 15 years ago
pcap.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap.c Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap1.h Put the public libpcap headers into a pcap subdirectory in both the 17 years ago
pcap_activate.3pcap Add some PCAP_WARNING return values for "success, but you might want to 15 years ago
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_can_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_compile.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink_name_to_val.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_datalink_val_to_name.3pcap Fix the pcap_datalink_val_to_name() man page. 15 years ago
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_dump_open.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_fileno.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_findalldevs.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_freealldevs.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_get_selectable_fd.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_list_datalinks.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_loop.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_open_dead.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_open_offline.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_datalink.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setfilter.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_stats.3pcap Document the new API's, move a bunch of information about libpcap 15 years ago
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 15 years ago
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 15 years ago
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 18 years ago
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 15 years ago
savefile.c Add more data types for X2E, requested by Hannes Kaelber. 15 years ago
scanner.l From Arien Vijn: support various notions for MAC addresses. 15 years ago
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 21 years ago

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.30 2004-10-12 02:02:28 guy Exp $ (LBL)

LIBPCAP 0.9
Now maintained by "The Tcpdump Group"
See www.tcpdump.org

Please send inquiries/comments/reports to tcpdump-workers@tcpdump.org

Anonymous CVS is available via:
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
(password "anoncvs")
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.9 of LIBPCAP can be retrieved with the CVS tag "libpcap_0_9rel1":
cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_9rel1 libpcap

Please send patches against the master copy to patches@tcpdump.org.

formerly from Lawrence Berkeley National Laboratory
Network Research Group <libpcap@ee.lbl.gov>
ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture. libpcap provides a portable
framework for low-level network monitoring. Applications include
network statistics collection, security monitoring, network debugging,
etc. Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter. BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''. A compressed PostScript version can be
found at

ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters). Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD. DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes). Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@tcpdump.org". Bugs, support requests,
and feature requests may also be submitted on the SourceForge site for
libpcap at

http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
"patches@tcpdump.org", or submitted as patches on the SourceForge site
for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

- The TCPdump team