Re: [tcpdump-workers] What's the correct new API to request pcap_linux to not open an eventfd

2022-07-05 Thread Bill Fenner via tcpdump-workers
--- Begin Message --- Hi Denis, Thanks for pointing out the manpage update. I had old man pages (my work is being done in the context of the 1.10 release). What confused me is the asymmetry of the API. If you call pcap_setnonblock() on an un-activated socket, it sets a flag and doesn't return

Re: [tcpdump-workers] What's the correct new API to request pcap_linux to not open an eventfd

2022-07-05 Thread Denis Ovsienko via tcpdump-workers
--- Begin Message --- On Fri, 1 Jul 2022 13:55:30 -0400 Bill Fenner via tcpdump-workers wrote: > If we set > pcap_nonblock after pcap_create and before pcap_activate, we get -3 - > which I don't get at all, unless, -3 means "you didn't activate the > pcap yet". My naive reading of the Linux

Re: [tcpdump-workers] RFC: TLS in rpcaps

2022-07-05 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Jul 4, 2022, at 4:49 PM, Ryan Castellucci via tcpdump-workers wrote: > 1) TLS compression support is a foot-bazooka, is exploitable in practice, and > should be removed. A modified version of the CRIME[1] attack should be > completely feasible. I can't imagine any