dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
guy e191909508 Pick up the "README.tru64" file from Ethereal, and change it to refer to
tcpdump, for the benefit of Digital^H^H^H^H^H^H^HTru64 UNIX users.
2001-01-24 06:52:52 +00:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
bpf/net Add support for a new link layer type DLT_LINUX_SLL, for use when doing 2000-12-21 10:29:21 +00:00
lbl Declare "pfopen()" in "lbl/os-osf4.h", as Digital don't seem to have 2000-12-22 11:51:33 +00:00
.cvsignore Add "config.h" and ".devel". 2000-12-17 08:11:20 +00:00
CHANGES Summary of changes for 0.6. 2001-01-10 04:10:33 +00:00
CREDITS Patch from Igor Khristophorov <igor@atdot.org> to handle adaptive SLIP 2001-01-20 07:47:53 +00:00
FILES Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
INSTALL The stuff in the "linux-include" directory is no longer needed, as we no 2000-12-16 09:05:11 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in Patch from Lorenzo Cavallaro <sullivan@sikurezza.org> to create 2001-01-18 04:05:12 +00:00
README Merge in changes from the libpcap 0.5 branch: 2000-07-13 06:24:14 +00:00
README.aix *** empty log message *** 2000-06-11 16:46:21 +00:00
README.linux Update the platform-specific information for various platforms. 2000-12-01 07:47:07 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO The stuff in the "linux-include" directory is no longer needed, as we no 2000-12-16 09:05:11 +00:00
VERSION preliminary edits for 0.6 2000-12-08 07:01:11 +00:00
aclocal.m4 The current "config.guess" may give different Alpha processors different 2000-09-19 03:56:26 +00:00
bpf_dump.c reomve interface.h, it's not used in libpcap 2000-06-26 04:17:05 +00:00
bpf_image.c add config.h, remove gnuc.h. remove __dead 2000-07-11 00:37:04 +00:00
config.guess Update config.guess and config.sub to revision 2000-12-15 2000-12-17 15:16:50 +00:00
config.h.in Sigh. Not all systems have <netinet/if_ether.h> - for example, at least 2001-01-17 18:18:48 +00:00
config.sub Update config.guess and config.sub to revision 2000-12-15 2000-12-17 15:16:50 +00:00
configure Sigh. Not all systems have <netinet/if_ether.h> - for example, at least 2001-01-17 18:18:48 +00:00
configure.in Sigh. Not all systems have <netinet/if_ether.h> - for example, at least 2001-01-17 18:18:48 +00:00
etherent.c add config.h, remove gnuc.h. remove __dead 2000-07-11 00:37:04 +00:00
ethertype.h I've seen captures with all four different flavors of IPX frames on 2001-01-14 21:26:52 +00:00
gencode.c Check for all four types of IPX frame on DLT_LINUX_SLL captures. 2001-01-15 00:03:40 +00:00
gencode.h Add "ipx", which checks for the LLC SAP for IPX as well as, on Ethernet, 2001-01-14 07:57:47 +00:00
grammar.y Add "ipx", which checks for the LLC SAP for IPX as well as, on Ethernet, 2001-01-14 07:57:47 +00:00
inet.c Added support for an "any" device based on a patch from Sebastian Krahmer. 2000-09-20 15:10:28 +00:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h I've seen captures with all four different flavors of IPX frames on 2001-01-14 21:26:52 +00:00
mkdep Initial revision 1999-10-07 23:46:40 +00:00
nametoaddr.c Sigh. Not all systems have <netinet/if_ether.h> - for example, at least 2001-01-17 18:18:48 +00:00
nlpid.h Tony Li's changes, from FreeBSD, to support filtering for OSI packets 2000-10-28 09:30:20 +00:00
optimize.c netbsd 1.5 -> 1.6 2000-11-19 13:37:20 +00:00
pcap-bpf.c When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
pcap-dlpi.c Fix a couple of error messages. 2000-11-22 05:32:55 +00:00
pcap-enet.c Get rid of the PCAP_ENCAP_ values - if an application uses them, that 2000-10-12 03:53:57 +00:00
pcap-int.h Add support for a new link layer type DLT_LINUX_SLL, for use when doing 2000-12-21 10:29:21 +00:00
pcap-linux.c Patch from Igor Khristophorov <igor@atdot.org> to handle adaptive SLIP 2001-01-20 07:47:53 +00:00
pcap-namedb.h Pick up, from the FreeBSD libpcap, changes to surround all declarations with 2000-07-29 07:36:41 +00:00
pcap-nit.c When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
pcap-nit.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-null.c When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
pcap-pf.c When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
pcap-pf.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-snit.c When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
pcap-snoop.c When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
pcap.3 Note that captures on the "any" device won't be done in promiscuous 2001-01-18 04:41:45 +00:00
pcap.c Clean up promiscuous mode, when using SOCK_PACKET, as best we can; 2000-12-16 10:43:26 +00:00
pcap.h When attaching a "bpf_program" to a "pcap_t" to use as a userland 2000-10-28 00:01:26 +00:00
ppp.h IPv6 packet filtering code. 1999-10-19 15:18:28 +00:00
savefile.c Add support for a new link layer type DLT_LINUX_SLL, for use when doing 2000-12-21 10:29:21 +00:00
scanner.l Add "ipx", which checks for the LLC SAP for IPX as well as, on Ethernet, 2001-01-14 07:57:47 +00:00
sll.h It's a bit more convenient for Ethereal if the "sll_protocol" field is 2000-12-23 07:50:18 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.22 2000-07-13 06:24:14 guy Exp $ (LBL)

LIBPCAP 0.5
Now maintained by "The Tcpdump Group"
See 		www.tcpdump.org

Please send inquiries/comments/reports to 	tcpdump-workers@tcpdump.org

Anonymous CVS is available via:
	cvs -d cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.5 of LIBPCAP can be retrived with the CVS tag "libpcap_0_5":
	cvs -d cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_5 libpcap

Please send patches against the master copy to patches@tcpdump.org.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed postscript version is in:

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z.

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC OSF/1
uses the packetfilter interface but has been extended to accept BPF
filters (which libpcap utilizes).  Also, you can add BPF filter support
to Ultrix using the kernel source and/or object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Problems, bugs, questions, desirable enhancements, etc. 
should be sent to the address "tcpdump-workers@tcpdump.org".

Source code contributions, etc. should be sent to the email address 
"patches@tcpdump.org".

Current versions can be found at www.tcpdump.org

 - The TCPdump team