[tcpdump-workers] typo in pcap.c

2007-11-06 Thread Gisle Vanem
--- CVS-Latest/pcap.c Wed Oct 17 17:52:41 2007 +++ pcap.c Tue Nov 06 15:04:27 2007 @@ -789,7 +789,7 @@ int pcap_setmintocopy(pcap_t *p, int size) { - return p->setintocopy_op(p, size); + return p->setmintocopy_op(p, size); } static int --gv - This is the tcpdump-workers list.

Re: [tcpdump-workers] typo in pcap.c

2007-11-06 Thread Gianluca Varenni
Checked in on HEAD and the libpcap_1_0 branch. Thanks! GV - Original Message - From: "Gisle Vanem" <[EMAIL PROTECTED]> To: "tcpdump-workers" Sent: Tuesday, November 06, 2007 6:04 AM Subject: [tcpdump-workers] typo in pcap.c --- CVS-Latest/pcap.c Wed Oct 17 17:52:41 2007 +++ pcap.

Re: [tcpdump-workers] Creation of libpcap 1.0 and tcpdump 4.0 branches

2007-11-06 Thread Gianluca Varenni
At the risk of being annoying, before going out with the great and mighty libpcap 1.0, would it be possible to fix the website? "Mailing lists" section - the archive at http://www.tcpdump.org/lists/workers/ is broken (it stops in dec2006 and even the 2006 links are broken) - the link to the mai

Re: [tcpdump-workers] Patches for wlan filtering

2007-11-06 Thread Gianluca Varenni
- Original Message - From: "Guy Harris" <[EMAIL PROTECTED]> To: Sent: Monday, November 05, 2007 6:12 PM Subject: Re: [tcpdump-workers] Patches for wlan filtering On Nov 5, 2007, at 2:49 PM, Gianluca Varenni wrote: I plan to compare this with the old version with the three possible

Re: [tcpdump-workers] Patches for wlan filtering

2007-11-06 Thread Guy Harris
Gianluca Varenni wrote: I think I found the problem: Yup, I just discovered that myself. I've checked in a change that fixes it to do (000) ldb [3] (001) lsh #8 (002) tax (003) ldb [2] (004) or x (005) st M[0] (006) tax (007) txa (008) add #24 (009) st M

Re: [tcpdump-workers] Patches for wlan filtering

2007-11-06 Thread Guy Harris
Gianluca Varenni wrote: I already noticed that the new BPF code doesn't check the link-type in the PPI header properly: the check against the linktype should be done before checking if the frame is a data frame. Should any packets with a linktype other than DLT_IEEE802_11_RADIO pass the filt

[tcpdump-workers] false checksum failure reports

2007-11-06 Thread Rick Jones
Any thoughts as to how to deal with false checksum failure reports for outbound traffic being sniffed on a system with ChecKsum Offload (CKO)? It seems that linux has a flag they can set when capturing the packet that would tell us, not sure what other platforms might have - there it might be n

Re: [tcpdump-workers] Patches for wlan filtering

2007-11-06 Thread Gianluca Varenni
[new BPF code, CVS snapshot. Not working] (000) ldb [3] (001) lsh #8 (002) tax (003) ldb [2] (004) or x (005) st M[0] (006) tax (007) txa (008) add #24 (009) st M[1] (010) ldb [x + 0] (011) jset #0x8 jt 12 jf 17 (012) jset #0x4

Re: [tcpdump-workers] Patches for wlan filtering

2007-11-06 Thread Gianluca Varenni
- Original Message - From: "Guy Harris" <[EMAIL PROTECTED]> To: Sent: Tuesday, November 06, 2007 11:14 AM Subject: Re: [tcpdump-workers] Patches for wlan filtering Gianluca Varenni wrote: I already noticed that the new BPF code doesn't check the link-type in the PPI header properl

Re: [tcpdump-workers] Patches for wlan filtering

2007-11-06 Thread Gianluca Varenni
It seems to work ok. Thanks! GV - Original Message - From: "Guy Harris" <[EMAIL PROTECTED]> To: Sent: Tuesday, November 06, 2007 11:12 AM Subject: Re: [tcpdump-workers] Patches for wlan filtering Gianluca Varenni wrote: I think I found the problem: Yup, I just discovered that m

[tcpdump-workers] Changes to the web-page

2007-11-06 Thread Luis Martin
Hi As Gianluca pointed out, the web page has certainly some things that need to be changed or improved. I think the web is currently a mess so I have made a few changes: -> All sections were restructured. -> Added section "Contents" -> Clean up of section "Documentation" + 1 tutorial added: "T

Re: [tcpdump-workers] Changes to the web-page

2007-11-06 Thread Gianluca Varenni
- Original Message - From: "Luis Martin" <[EMAIL PROTECTED]> To: Sent: Tuesday, November 06, 2007 3:21 PM Subject: [tcpdump-workers] Changes to the web-page Hi As Gianluca pointed out, the web page has certainly some things that need to be changed or improved. I think the web is c

Re: [tcpdump-workers] false checksum failure reports

2007-11-06 Thread Harley Stenzel
On Nov 6, 2007 2:03 PM, Rick Jones <[EMAIL PROTECTED]> wrote: > Any thoughts as to how to deal with false checksum failure reports for > outbound > traffic being sniffed on a system with ChecKsum Offload (CKO)? It seems that > linux has a flag they can set when capturing the packet that would tel

Re: [tcpdump-workers] Changes to the web-page

2007-11-06 Thread Ken Bantoft
On Wed, 7 Nov 2007, Luis Martin wrote: > Hi > > As Gianluca pointed out, the web page has certainly some things that > need to be changed or improved. > > I think the web is currently a mess so I have made a few changes: > > -> All sections were restructured. > > -> Added section "Contents"

Re: [tcpdump-workers] false checksum failure reports

2007-11-06 Thread Rick Jones
Harley Stenzel wrote: On Nov 6, 2007 2:03 PM, Rick Jones <[EMAIL PROTECTED]> wrote: Any thoughts as to how to deal with false checksum failure reports for outbound traffic being sniffed on a system with ChecKsum Offload (CKO)? It seems that linux has a flag they can set when capturing the pack

Re: [tcpdump-workers] false checksum failure reports

2007-11-06 Thread ronnie sahlberg
On Nov 7, 2007 12:54 PM, Rick Jones <[EMAIL PROTECTED]> wrote: > Harley Stenzel wrote: > > On Nov 6, 2007 2:03 PM, Rick Jones <[EMAIL PROTECTED]> wrote: > > > >>Any thoughts as to how to deal with false checksum failure reports for > >>outbound > >>traffic being sniffed on a system with ChecKsum O

Re: [tcpdump-workers] Changes to the web-page

2007-11-06 Thread Luis Martin
Gianluca Varenni wrote: > > I would probably get rid of the old releases, putting them in an > archive folder (like I do for WinPcap). Also, I would rename the > "TCPDUMP 3.9 / LIBPCAP 0.9" section specifying the specific version > 3.9.8/0.9.8. (The current title is kinda confusing for me). > I ag