[tcpdump-workers] how can i access tsval from tcp options?

2014-02-15 Thread Daniel H. Bahr
Hello everyone, I'm in need of accessing the tsval value of the options field in the tcp header... i've been checking the tcp.h and did not find anything that helped me. Does any body know how to do it? Best regards ___ tcpdump-workers mailing list

Re: [tcpdump-workers] Build and check on a big-endian system

2014-02-15 Thread Michael Richardson
François-Xavier Le Bail fx.leb...@yahoo.com wrote: At present, the Travis test do a x86_64 build and a 'make check'. So the checks are done on a little-endian system. He could be useful to add a build and check on a big-endian system. What do you think about it? I would

Re: [tcpdump-workers] Build and check on a big-endian system

2014-02-15 Thread François-Xavier Le Bail
From: Michael Richardson m...@sandelman.ca François-Xavier Le Bail fx.leb...@yahoo.com wrote:     At present, the Travis test do a x86_64 build and a 'make check'.     So the checks are done on a little-endian system.     He could be useful to add a build and check on a big-endian

Re: [tcpdump-workers] how can i access tsval from tcp options?

2014-02-15 Thread Denis Ovsienko
15.02.2014, 18:44, Daniel H. Bahr dhb...@gmail.com: Hello everyone, I'm in need of accessing the tsval value of the options field in the tcp header... i've been checking the tcp.h and did not find anything that helped me. Does any body know how to do it? Greetings. TCP options are a

[tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Luigi Rizzo
I have created a repo with a cloned copy of the pcap repository with netmap support: https://code.google.com/p/netmap-libpcap With that, you can easily have tcpdump (and any libpcap application) process 10-15Mpps with a single thread through NICs in netmap mode (see

Re: [tcpdump-workers] Build and check on a big-endian system

2014-02-15 Thread Michael Richardson
François-Xavier Le Bail fx.leb...@yahoo.com wrote: Do you? I did not test, but it seems promising : http://www.aurel32.net/info/debian_mips_qemu.php so, you are saying we should install a qemu mips emulator inside travis to do the testing... wow.. fork the tree, enable travis,

Re: [tcpdump-workers] Build and check on a big-endian system

2014-02-15 Thread François-Xavier Le Bail
From: Michael Richardson m...@sandelman.ca so, you are saying we should install a qemu mips emulator inside travis to do the testing... wow.. fork the tree, enable travis, and try it out... FYI, digging more, I used this link: http://people.debian.org/~aurel32/qemu/powerpc/ with the file:

Re: [tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Michael Richardson
So, basically if we use a device name like netmap: or vale, then we would get support for it. Are there dependancies that would piss off distros that we should worry about? You say that we need netmap, but I don't see where in the build it references some new library. Fork, and push your

Re: [tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Luigi Rizzo
On Sat, Feb 15, 2014 at 1:15 PM, Michael Richardson m...@sandelman.cawrote: So, basically if we use a device name like netmap: or vale, then we would get support for it. Are there dependancies that would piss off distros that we should worry about? You say that we need netmap, but I don't

Re: [tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Luigi Rizzo
On Sat, Feb 15, 2014 at 1:37 PM, Guy Harris g...@alum.mit.edu wrote: On Feb 15, 2014, at 1:24 PM, Luigi Rizzo ri...@iet.unipi.it wrote: At runtime, netmap only uses open(), ioctl(), mmap() and poll(). ...and nm_dispatch(). Is that an inline function defined in the headers? yes, same as

Re: [tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Guy Harris
On Feb 15, 2014, at 12:17 PM, Luigi Rizzo ri...@iet.unipi.it wrote: + p-linktype = DLT_EN10MB; So this either 1) only works on Ethernet devices and devices that supply Ethernet headers or 2) generates Ethernet headers that replace the native link-layer headers for

Re: [tcpdump-workers] Build and check on a big-endian system

2014-02-15 Thread François-Xavier Le Bail
From: Michael Richardson m...@sandelman.ca The ESP tests are failing because you haven't got libssl-dev Right, thanks ! remain :     dccp_partial_csum_v4_simple   : TEST FAILED     dccp_partial_csum_v4_longer   : TEST FAILED ___ tcpdump-workers

Re: [tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Michael Richardson
Luigi Rizzo ri...@iet.unipi.it wrote: Also, when a port is in netmap mode is temporarily disconnected from the host stack, so you want to be careful on where you use it. The monitoring folks (bro, suricata...) will probably love this feature but for others it might be more

Re: [tcpdump-workers] code available: netmap support for libpcap

2014-02-15 Thread Luigi Rizzo
On Sat, Feb 15, 2014 at 11:24:28PM +0100, Luigi Rizzo wrote: ... I think what Michael means is that if we include net/netmap.h and net/netmap_user.h in the libpcap distribution, we can have the support always compiled in and postpone the decision at compile time.

Re: [tcpdump-workers] Build and check on a big-endian system

2014-02-15 Thread Guy Harris
On Feb 15, 2014, at 1:21 PM, Michael Richardson m...@sandelman.ca wrote: The ESP tests are failing because you haven't got libssl-dev. Yes - some tests fail if the full set of support libraries weren't available when tcpdump was built. Perhaps we want to suppress some tests if we don't have