dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
hannes 20937040b8 per suggestion from Paolo Lucente <paolo.lucente@ic.cnr.it>:
centralize the MPLS check into gen_linktype() and backout the
  specific checks in gen_proto_abrev(), gen_proto(), gen_host()

  this adds as a by-product support for IPv6
2005-07-14 16:01:46 +00:00
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Added support for 64 bit integers under Windows. 2005-05-04 19:39:05 +00:00
bpf/net Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos Actually add the RCS ID claimed to be added by the previous checkin. 2004-12-19 19:47:01 +00:00
packaging Go with 0.9, not 1.0, for the next release. 2004-10-12 01:55:47 +00:00
.cvsignore From Motonori Shindo: version.h is a generated file, ignore it when 2003-03-01 05:04:40 +00:00
CHANGES adjusted version 2005-07-11 20:09:47 +00:00
CREDITS From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
FILES From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
INSTALL.txt From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
README Another update for the new version number. 2004-10-12 02:02:28 +00:00
README.Win32 Added a readme that explains how to compile libpcap under win32. 2002-08-09 13:55:12 +00:00
README.aix From Shaun Clowes: update the to reflect the fact that it should now 2003-04-17 06:32:37 +00:00
README.dag From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 2001-07-29 18:25:46 +00:00
README.macosx Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO Documentation fixes from Chris Pepper <pepper@mail.reppep.com>. 2001-06-05 03:45:53 +00:00
VERSION adjusted version 2005-07-11 20:09:47 +00:00
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 2001-11-12 22:18:01 +00:00
aclocal.m4 AC_TRY_COMPILE works only for code that fits inside "main()"; the test 2005-04-21 03:42:09 +00:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00
bpf_dump.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
bpf_image.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
config.guess Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
config.h.in From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
config.sub Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
configure From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
configure.in From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
etherent.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
ethertype.h add baseline support for MPLS protocol and per-label filtering 2004-06-16 08:20:28 +00:00
fad-getad.c backport the changes over the weekend from HEAD to 0_9 2005-04-10 18:04:47 +00:00
fad-gifc.c Checking whether the amount of data returned by SIOCGIFCONF is less than 2005-06-29 06:43:31 +00:00
fad-glifc.c From Albert Chin: fix a cut-and-pasteo. 2005-04-19 00:54:16 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-win32.c Clean up indentation. 2005-01-29 00:52:22 +00:00
gencode.c per suggestion from Paolo Lucente <paolo.lucente@ic.cnr.it>: 2005-07-14 16:01:46 +00:00
gencode.h From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
grammar.y From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
inet.c From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep Initial revision 1999-10-07 23:46:40 +00:00
nametoaddr.c Some systems (*cough*Irix*cough) not only don't declare 2005-04-20 11:13:50 +00:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Add a little more information to a comment. 2005-04-04 08:42:18 +00:00
pcap-bpf.c select() should work on BPF devices on Tiger; it's poll() and kqueues 2005-07-10 10:55:31 +00:00
pcap-bpf.h RFC 1483 handles more than just IP and more than just SNAP. 2005-05-27 23:33:00 +00:00
pcap-dag.c Stephen Donnely says MTP3 and SCCP don't belong in the list of DLT_ 2005-07-10 22:09:34 +00:00
pcap-dag.h From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
pcap-dlpi.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-dos.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-int.h From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
pcap-linux.c OK, we'll be putting out 0.9.2 soon, so add the API changes back in 2005-07-07 02:04:33 +00:00
pcap-namedb.h From Patrick Marie <mycroft@virgaria.org>: add support for port ranges 2005-04-19 04:26:06 +00:00
pcap-nit.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-nit.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-pf.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-pf.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-septel.c The data link layer isn't settable, so get rid of 2005-06-21 01:03:23 +00:00
pcap-septel.h From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
pcap-snit.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-snoop.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-stdinc.h Avoids a compiler warning in case _WINSOCKAPI_ was already defined (someone defined _WINSOCKAPI_ when including 'windows.h', in order * to prevent it from including 'winsock.h') 2003-09-25 15:59:42 +00:00
pcap-win32.c Added a missing initialization of pcap_t::timeout when an adapter is opened 2005-07-10 17:52:54 +00:00
pcap.3 OK, we'll be putting out 0.9.2 soon, so add the API changes back in 2005-07-07 02:04:33 +00:00
pcap.c OK, we'll be putting out 0.9.2 soon, so add the API changes back in 2005-07-07 02:04:33 +00:00
pcap.h OK, we'll be putting out 0.9.2 soon, so add the API changes back in 2005-07-07 02:04:33 +00:00
pcap1.h update changes file 2004-03-30 14:42:50 +00:00
pf.h Not all systems have "sa_family_t"; use "u_int8_t" instead. 2004-04-02 06:33:30 +00:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
savefile.c OK, we'll be putting out 0.9.2 soon, so add the API changes back in 2005-07-07 02:04:33 +00:00
scanner.l From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
sll.h whitespace cleanup 2002-06-11 17:04:44 +00:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.30 2004-10-12 02:02:28 guy Exp $ (LBL)

LIBPCAP 0.9
Now maintained by "The Tcpdump Group"
See 		www.tcpdump.org

Please send inquiries/comments/reports to 	tcpdump-workers@tcpdump.org

Anonymous CVS is available via:
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.9 of LIBPCAP can be retrieved with the CVS tag "libpcap_0_9rel1":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_9rel1 libpcap

Please send patches against the master copy to patches@tcpdump.org.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@tcpdump.org".  Bugs, support requests,
and feature requests may also be submitted on the SourceForge site for
libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
"patches@tcpdump.org", or submitted as patches on the SourceForge site
for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team