dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Guy Harris fa4435e65c Add support for setting the time stamp type for a capture.
Based on a patch from Scott Mcmillan <scott.a.mcmillan@intel.com>.

(Second part of the commit.)
2010-08-22 17:36:27 -07:00
ChmodBPF To quote 2009-09-09 16:50:36 -07:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Don't define or use any of the SIZEOF_ values. 2010-04-04 13:48:11 -07:00
bpf/net Fix check for a constant 0 argument to BPF_DIV. 2010-04-21 02:20:48 -07:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos From Gisle Vanem: 2008-04-22 17:20:25 +00:00
packaging On Linux (and other platforms using the V7 man page conventions), we 2008-10-27 20:50:56 +00:00
pcap Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
tests Move test source to a tests directory, add a new test for nonblocking mode. 2010-03-31 12:39:35 -07:00
.cvsignore More files to ignore. 2008-10-23 22:14:38 +00:00
.gitignore Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
CHANGES Mention the 802.15.4 changes. 2010-08-06 14:45:14 -07:00
CREDITS Give Scott McMillan credit for the initial time stamp patch. 2010-08-22 17:09:04 -07:00
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 2008-06-12 20:21:51 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
README Again, we're using Git now. 2010-02-08 11:26:05 -08:00
README.Win32 Again, we're using Git now. 2010-02-08 11:26:05 -08:00
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
README.dag From Stephen Donnelly: 2006-04-07 07:07:25 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux Note that libpcap links with libnl by default - and that this shouldn't 2009-07-15 14:19:13 -07:00
README.macosx Put in a note about the Snow Leopard bug that requires that you have BPF 2009-09-09 17:36:06 -07:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:27:07 +00:00
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO Again, we're using Git now. 2010-02-08 11:26:05 -08:00
VERSION The first 1.2.x release will be 1.2.0, not 1.2. 2010-04-01 22:32:44 -07:00
aclocal.m4 On FreeBSD/SPARC64, use -fPIC - it's apparently necessary. 2010-05-29 19:27:49 -07:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 2007-10-22 19:28:58 +00:00
bpf_dump.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
bpf_image.c Include headers that should cause u_int64_t to be defined. 2010-01-27 00:46:43 -08:00
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 2008-05-28 02:14:10 +00:00
config.guess Update config.guess and config.sub to the latest versions. 2010-01-08 10:37:10 -08:00
config.h.in Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
config.sub Update config.guess and config.sub to the latest versions. 2010-01-08 10:37:10 -08:00
configure Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
configure.in Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
dlpisubs.c Don't define pcap_stream_err() if we're not going to use it. 2009-06-29 00:50:19 -07:00
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
etherent.c Include headers that should cause u_int64_t to be defined. 2010-01-26 23:18:30 -08:00
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:06:58 +00:00
fad-getad.c Add a #include required on RHEL5. 2010-04-01 01:58:32 -07:00
fad-gifc.c Scan /proc/net/dev on Linux regardless of how we get the interface list. 2010-01-09 18:46:02 -08:00
fad-glifc.c From Sagun Shakya: fix typoes in comments. 2008-01-30 09:35:48 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 2007-09-25 20:34:36 +00:00
gencode.c New DLT_IEEE802_15_4_NOFCS for 802.15.4 without FCS. 2010-08-06 14:12:16 -07:00
gencode.h Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
grammar.y Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
inet.c Update description fetching code for FreeBSD, fix code for OpenBSD. 2010-04-28 12:29:19 -07:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 2007-10-16 11:35:53 +00:00
nametoaddr.c From Gisle Vanem: 2009-02-14 14:36:34 -08:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Include headers that should cause u_int64_t to be defined. 2010-01-26 20:28:51 -08:00
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 2008-06-05 08:10:59 +00:00
pcap-bpf.c Fix handling of close of zerocopy BPF; based on a patch from Christian Peron. 2010-08-20 12:17:31 -07:00
pcap-bpf.h Add RCS IDs. 2007-04-01 21:43:55 +00:00
pcap-bt-linux.c Do filtering on USB and Bluetooth capturing. 2010-06-04 10:48:16 -07:00
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-can-linux.c Fix some problems pointed out by compiler warnings. 2009-12-31 15:10:02 -08:00
pcap-can-linux.h Add support for CANbus capture. 2009-12-29 01:04:20 -08:00
pcap-common.c New DLT_IEEE802_15_4_NOFCS for 802.15.4 without FCS. 2010-08-06 14:12:16 -07:00
pcap-common.h Byte-swap the extra fields in the "version 1" USB monitor header. 2010-01-25 15:12:43 -08:00
pcap-config.1 Add a --additional-libs flag to pcap-config, to write out any additional 2009-05-22 16:04:25 -07:00
pcap-config.in Oops, close a quote. 2009-06-09 10:56:41 -07:00
pcap-dag.c handle->md.stat should be zeroed out when we initially allocated the 2009-09-07 16:48:26 -07:00
pcap-dag.h Updating Endace DAG ERF support. 2009-05-04 16:32:52 +12:00
pcap-dlpi.c Squelch warnings about type punning. 2010-02-23 20:01:35 -08:00
pcap-dos.c From Gisle Vanem: 2008-04-22 17:16:30 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap-filter.manmisc.in Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
pcap-int.h Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
pcap-libdlpi.c From Sebastien Roy: fix compilation problems on versions of Solaris with 2009-02-26 01:16:26 -08:00
pcap-linktype.manmisc.in Hyphenate "link-layer" everywhere. 2009-11-16 12:01:24 -08:00
pcap-linux.c Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
pcap-namedb.h Add a cautionary note to OS vendors here as well. 2006-10-04 18:13:32 +00:00
pcap-nit.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-null.c Update to the new style, wherein each capture type has its own 2009-02-14 14:13:52 -08:00
pcap-pf.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 2008-10-24 07:33:50 +00:00
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
pcap-sita.html Again, Git, not CVS. 2010-02-08 15:57:58 -08:00
pcap-snf.c Add Myricom SNF API support as a new pcap device. 2010-01-26 11:58:37 -08:00
pcap-snf.h Add Myricom SNF API support as a new pcap device. 2010-01-26 11:58:37 -08:00
pcap-snit.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-snoop.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-stdinc.h Don't define or use any of the SIZEOF_ values. 2010-04-04 13:48:11 -07:00
pcap-tstamp.manmisc.in Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
pcap-usb-linux.c Do filtering on USB and Bluetooth capturing. 2010-06-04 10:48:16 -07:00
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-win32.c Removed some leftover tracing messages. 2009-07-15 13:30:41 -07:00
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap.c Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
pcap_activate.3pcap Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_can_set_rfmon.3pcap Add some additional SEE ALSO references. 2010-08-22 15:08:20 -07:00
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_compile.3pcap.in Add a #define for 0xffffffff as PCAP_NETMASK_UNKNOWN, for use when you 2009-12-01 19:23:21 -08:00
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink.3pcap.in Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_datalink_name_to_val.3pcap Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_datalink_val_to_name.3pcap Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 2008-10-23 05:56:59 +00:00
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_fileno.3pcap Describe all the cases where pcap_fileno() returns a file descriptor and 2009-11-03 14:18:11 -08:00
pcap_findalldevs.3pcap Add some additional SEE ALSO references. 2010-08-22 15:08:20 -07:00
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_get_selectable_fd.3pcap Give N. Leiten credit for the poll() exceptional condition checks in 2009-10-12 17:21:02 -07:00
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_list_datalinks.3pcap.in Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_list_tstamp_types.3pcap.in Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_loop.3pcap Another change from Debian. 2008-12-25 02:01:32 +00:00
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_offline.3pcap.in Mention that we can read some pcap-ng files. 2010-01-09 17:06:10 -08:00
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_datalink.3pcap Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_tstamp_type.3pcap.in Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_stats.3pcap From Dustin Spicuzza: support ps_ifdrop on Linux, using /proc/net/dev. 2009-09-07 16:23:15 -07:00
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 2008-04-09 21:39:21 +00:00
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 2008-04-05 20:26:56 +00:00
pcap_tstamp_type_name_to_val.3pcap Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
pcap_tstamp_type_val_to_name.3pcap Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 2007-12-31 03:38:39 +00:00
savefile.c Reject attempts to put savefiles into non-blocking mode. 2010-05-28 20:39:09 -07:00
scanner.l Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
sf-pcap-ng.c Oops - should convert the LINKTYPE_ value in pcap-ng Interface 2010-07-20 10:19:02 -07:00
sf-pcap-ng.h Add limited support for reading pcap-ng files. 2010-01-09 16:58:15 -08:00
sf-pcap.c Added the definition of SET_BINMODE under WIN32. 2010-03-09 12:27:31 -08:00
sf-pcap.h Add limited support for reading pcap-ng files. 2010-01-09 16:58:15 -08:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.34 2008-12-14 19:44:14 guy Exp $ (LBL)

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
	tcpdump-workers@lists.tcpdump.org

Anonymous Git is available via:
	git clone git://bpf.tcpdump.org/libpcap

Version 1.x.y of LIBPCAP can be retrieved with the CVS tag "libpcap_1_{x}rel{y}":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_1_{x}rel{y} libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux 
and *BSD, among other platforms.

It sets the soname of the library to "libpcap.so.1"; this is what it 
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as 
that.

We've been maintaining binary compatibility between libpcap releases for 
quite a while; there's no reason to tie a binary linked with libpcap to 
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org".  Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team