Re: [tcpdump-workers] Raw USB capturing with libpcap 1.1?

2010-05-06 Thread Chris Maynard
Chris Maynard Chris.Maynard at gtech.com writes: I changed the filter and it works as advertised. I had to put this aside for awhile, but revisited it today. While I did change the filter to one of the form {expr} {relop} {expr} and was able to successfully capture packets, the capture filter

Re: [tcpdump-workers] Raw USB capturing with libpcap 1.1?

2010-04-02 Thread Chris Maynard
Guy Harris guy at alum.mit.edu writes: If you're passing to pcap_compile() a string that includes any filter primitives other than the {expr} {relop} {expr} primitives mentioned in the pcap-filter man page, or where any of the special packet data accessors ({proto}[{expr}:{size}]) have a

[tcpdump-workers] Raw USB capturing with libpcap 1.1?

2010-04-01 Thread Chris Maynard
I was under the impression that libpcap allowed one to capture raw USB traffic (See http://wiki.wireshark.org/CaptureSetup/USB). However, with libpcap 1.1, this doesn't seem to work as I get an error from pcap_compile() with pcap_geterr() returning, USB link-layer type filtering not

Re: [tcpdump-workers] Raw USB capturing with libpcap 1.1?

2010-04-01 Thread Guy Harris
On Apr 1, 2010, at 1:04 PM, Chris Maynard wrote: I was under the impression that libpcap allowed one to capture raw USB traffic (See http://wiki.wireshark.org/CaptureSetup/USB). However, with libpcap 1.1, this doesn't seem to work as I get an error from pcap_compile() with pcap_geterr()