dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
mcr 6e8f58c867 updated version 2006-09-19 19:27:07 +00:00
ChmodBPF Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Added an implementation of gai_strerror() for the compilation of libpcap.lib 2006-01-22 18:14:17 +00:00
bpf/net Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos Actually add the RCS ID claimed to be added by the previous checkin. 2004-12-19 19:47:01 +00:00
packaging Check in the current version. 2006-09-18 17:36:33 +00:00
.cvsignore From Motonori Shindo: version.h is a generated file, ignore it when 2003-03-01 05:04:40 +00:00
CHANGES Update for 0.9.5 2006-09-19 17:49:59 +00:00
CREDITS From Ollie Wild: if we're bound to an interface, discard incoming 2006-04-07 08:02:45 +00:00
FILES From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
INSTALL.txt From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in From Albert Chin <china@thewrittenword.com>: on platforms that lack 2003-12-15 01:35:03 +00:00
README Another update for the new version number. 2004-10-12 02:02:28 +00:00
README.Win32 Added a readme that explains how to compile libpcap under win32. 2002-08-09 13:55:12 +00:00
README.aix From Shaun Clowes: update the to reflect the fact that it should now 2003-04-17 06:32:37 +00:00
README.dag From Stephen Donnelly: 2006-04-07 07:08:50 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux From Scott Barron <sb125499@ohiou.edu>: use the 2001-07-29 18:25:46 +00:00
README.macosx Add an OS X startup item to set the permissions and/or ownership of the 2004-10-18 09:51:02 +00:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO Documentation fixes from Chris Pepper <pepper@mail.reppep.com>. 2001-06-05 03:45:53 +00:00
VERSION updated version 2006-09-19 19:27:07 +00:00
acconfig.h Add "const" for autoconf 2.52 compatability. Longer term solution: 2001-11-12 22:18:01 +00:00
aclocal.m4 AC_TRY_COMPILE works only for code that fits inside "main()"; the test 2005-04-21 03:42:09 +00:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00
bpf_dump.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
bpf_image.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
config.guess Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
config.h.in From Stephen Donnelly: 2006-04-07 07:08:50 +00:00
config.sub Latest config.guess and config.sub from 2003-11-18 06:30:50 +00:00
configure From Stephen Donnelly: 2006-04-07 07:08:50 +00:00
configure.in From Stephen Donnelly: 2006-04-07 07:08:50 +00:00
etherent.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:08:03 +00:00
fad-getad.c backport the changes over the weekend from HEAD to 0_9 2005-04-10 18:04:47 +00:00
fad-gifc.c Checking whether the amount of data returned by SIOCGIFCONF is less than 2005-06-29 06:43:31 +00:00
fad-glifc.c From Albert Chin: fix a cut-and-pasteo. 2005-04-19 00:54:16 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-win32.c Fixed some capitalization that could cause problems cross compiling under linux. 2006-02-22 17:09:32 +00:00
gencode.c Add off_ll to off_nl in cases where that's required and that we missed 2006-09-13 07:36:19 +00:00
gencode.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:08:03 +00:00
grammar.y Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:08:03 +00:00
inet.c We've already used strdup(), and nobody's complained about their OS 2006-01-21 10:46:13 +00:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep Initial revision 1999-10-07 23:46:40 +00:00
nametoaddr.c Some systems (*cough*Irix*cough) not only don't declare 2005-04-20 11:13:50 +00:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Add a little more information to a comment. 2005-04-04 08:42:18 +00:00
pcap-bpf.c From Sam Leffler and Jason Evans: fix the allocation of the buffer for 2006-01-22 05:28:34 +00:00
pcap-bpf.h Added a new DLT and LINKTYPE value for ARINC 653 Interpartition 2006-07-27 21:06:17 +00:00
pcap-dag.c From Stephen Donnelly: 2006-04-07 07:08:50 +00:00
pcap-dag.h From Stephen Donnelly: updates to the DAG support, to support their 2005-07-07 06:56:02 +00:00
pcap-dlpi.c putmsg() returns 0 or -1, not the number of bytes written. 2006-04-04 05:33:02 +00:00
pcap-dos.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-int.h Fixed some capitalization that could cause problems with cross compilers. 2006-02-22 17:09:54 +00:00
pcap-linux.c Indicate *which* ioctl failed. 2006-09-18 17:34:31 +00:00
pcap-namedb.h From Patrick Marie <mycroft@virgaria.org>: add support for port ranges 2005-04-19 04:26:06 +00:00
pcap-nit.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-nit.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
pcap-pf.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-pf.h Initial revision 1999-10-07 23:46:40 +00:00
pcap-septel.c The data link layer isn't settable, so get rid of 2005-06-21 01:03:23 +00:00
pcap-septel.h From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:30:13 +00:00
pcap-snit.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-snoop.c From Pawel Pokrywka: add support for requesting that only received 2005-05-03 18:54:33 +00:00
pcap-stdinc.h Added a definition for SIZEOF_LONG_LONG for Cygnus compilation (win32). 2005-07-21 18:13:27 +00:00
pcap-win32.c Added support for DLT_IEEE802_11 and DLT_IEEE802_11_RADIO link layers in windows 2006-08-09 19:18:41 +00:00
pcap.3 From Daniele Orlandi <daniele@orlandi.com>: add support for capturing 2006-01-22 20:12:09 +00:00
pcap.c Added a new DLT and LINKTYPE value for ARINC 653 Interpartition 2006-07-27 21:06:17 +00:00
pcap.h Clean up some comments, and give more details so people understand what 2006-02-09 22:26:49 +00:00
pcap1.h update changes file 2004-03-30 14:42:50 +00:00
pf.h Not all systems have "sa_family_t"; use "u_int8_t" instead. 2004-04-02 06:33:30 +00:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
savefile.c Added a new DLT and LINKTYPE value for ARINC 653 Interpartition 2006-07-27 21:06:17 +00:00
scanner.l Previous change was applied by hand, and deleted one line. Put that 2005-11-09 23:49:48 +00:00
sll.h whitespace cleanup 2002-06-11 17:04:44 +00:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.30 2004-10-12 02:02:28 guy Exp $ (LBL)

LIBPCAP 0.9
Now maintained by "The Tcpdump Group"
See 		www.tcpdump.org

Please send inquiries/comments/reports to 	tcpdump-workers@tcpdump.org

Anonymous CVS is available via:
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master login
	(password "anoncvs")
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout libpcap

Version 0.9 of LIBPCAP can be retrieved with the CVS tag "libpcap_0_9rel1":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_0_9rel1 libpcap

Please send patches against the master copy to patches@tcpdump.org.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

Note well: this interface is new and is likely to change.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@tcpdump.org".  Bugs, support requests,
and feature requests may also be submitted on the SourceForge site for
libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
"patches@tcpdump.org", or submitted as patches on the SourceForge site
for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team