[tcpdump-workers] Automatic report from sources (tcpdump libpcap htdocs) between 23.09.2004 - 24.09.2004 GMT

2004-09-24 Thread Automatic cvs log generator /tcpdump/bin/makelog
CVS log entries from 23.09.2004 (Thu) 09:06:30 - 24.09.2004 (Fri) 09:06:39 GMT = Summary by authors = Author: dyoung File: tcpdump/extract.h; Revisions: 1.20 File: tcpdump/Makefil

[tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

2004-09-24 Thread Michael Mueller
Hi, Tcpdump -E doesn't work for 3des-cbc encryption with hmac-md5 authentication (tested with tcpdump-2004.09.22 on Linux 2.6). The reason is that in esp_print_decode_onesecret(), print-esp.c authlen is left 0 instead of setting it to 12 for *-cbc encryptions. The 12 byte authlen is required fo

Re: [tcpdump-workers] tcpdump -E doesn't work for 3des-cbc/hmac-md5

2004-09-24 Thread Michael Mueller
Sorry, I forgot to append the patch. Tcpdump -E doesn't work for 3des-cbc encryption with hmac-md5 authentication (tested with tcpdump-2004.09.22 on Linux 2.6). The reason is that in esp_print_decode_onesecret(), print-esp.c authlen is left 0 instead of setting it to 12 for *-cbc encryptions. T

Re: [tcpdump-workers] x.9 branch

2004-09-24 Thread Hannes Gredler
On Thu, Sep 23, 2004 at 12:23:55PM -0700, Guy Harris wrote: | (blah blah blah the other brain fart was sending it from sonic.net again | blah blah blah duplicate message dissector blah blah blah) | | Michael Richardson wrote: | | > You tell me. | > We didn't do a 0.8.4 yet, but this sounds lik

[tcpdump-workers] imported radiotap (DLT_IEEE802_11_RADIO)

2004-09-24 Thread David Young
I checked in the sources for radiotap yesterday. Dave -- David Young OJC Technologies [EMAIL PROTECTED] Urbana, IL * (217) 278-3933 - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] "final" radiotap patch for tcpdump

2004-09-24 Thread David Young
On Sun, Sep 19, 2004 at 05:32:12PM -0700, Guy Harris wrote: > Is the cpack.c stuff useful, or potentially useful, for anything other > than the radiotap stuff? It is potentially useful, yes, for other extensible, synthetic headers where CPU and memory bandwidth need to be conserved. I cannot pred

Re: [tcpdump-workers] "final" radiotap patch for tcpdump

2004-09-24 Thread David Young
On Sun, Sep 19, 2004 at 02:02:05PM -0700, Guy Harris wrote: > "pcap_is_swapped(p)" returns "true" if the capture file you've opened > was captured on a machine with a different byte order, based on the byte > order of the magic number - if that matches the byte order of the > radiotap values, that'

Re: [tcpdump-workers] "final" radiotap patch for tcpdump

2004-09-24 Thread Guy Harris
(blah blah blah *surely* Thunderbird must have some way of arranging that a particular mailbox have a preferred From address blah blah blah duplicate post blah blah blah) David Young wrote: "Oh." Have we got the stomach for radiotap v2? If big-endian kernels no longer have to convert fields to