Re: [tcpdump-workers] [PATCH]: [DCCP]: support for variable-length checksums

)' I would like to see this merged as a Linux kernel patch already exists for DCCP partial checksum coverage support. I would agree with this going ahead and in particular I remember the CCVAL bug and then forgetting to fix it... -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog: http

Re: [tcpdump-workers] HTTP support in libpcap

be able to help: http://research.wand.net.nz/software/libtrace.php -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog: http://imcdnzl.blogspot.com WAND Network Research Group Department of Computer Science University of Waikato New Zealand - This is the tcpdump-workers list. Visit https

Re: [tcpdump-workers] regarding arp and rarp

/) looks like it can dissect ARP (along with a bunch of other protocols). Hope this helps, Richard - As does libtrace: http://research.wand.net.nz/software/libtrace.php -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog: http://imcdnzl.blogspot.com WAND Network Research Group Department

Re: [tcpdump-workers] accessing IP packet header

that information for each IP type of packet. Thanks in advance to everyone, zubin Hi there, I think libtrace from our research lab might be exactly what you want. Have a look at: http://research.wand.net.nz/software/libtrace.php Regards, Ian -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog: http

Re: [tcpdump-workers] Strange behavior of pcap filter

option it won't do this. Is there any way I can capture packets efficiently with rate as high as 40 msec? This should be no problem at all -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog: http://imcdnzl.blogspot.com WAND Network Research Group Department of Computer Science University

[tcpdump-workers] [PATCH] DCCP - print all ACKs

this please be added to tcpdump? Regards, Ian -- Ian McDonald http://wand.net.nz/~iam4 WAND Network Research Group University of Waikato New Zealand diff -uprN -X dontdiff tcpdump-2005.10.03/print-dccp.c dccpdump/print-dccp.c --- tcpdump-2005.10.03/print-dccp.c 2005-09-20 18:25:20.0 +1200

Re: [tcpdump-workers] [PATCH] DCCP support - revised

On 20/09/05, Guy Harris [EMAIL PROTECTED] wrote: Ian McDonald wrote: Please find attached a slightly revised patch to tidyup a bug with seqno/ackno processing. Checked into the main and x.9 branches. I got rid of the dh_end variable, and added RCS IDs. I gave you and Arnaldo credit

[tcpdump-workers] [PATCH] DCCP support - revised

Guy, Please find attached a slightly revised patch to tidyup a bug with seqno/ackno processing. Regards, Ian On 06/09/05, Ian McDonald [EMAIL PROTECTED] wrote: Guy, Comments inline. dh_end still isn't being used, as per my original comment: In addition, there are no TCHECK

Re: [tcpdump-workers] [PATCH] DCCP support

:24.276683776 +1200 @@ -0,0 +1,136 @@ +#ifndef __DCCP_HDR__ +#define __DCCP_HDR__ +/* + * Copyright (C) Arnaldo Carvalho de Melo 2004 + * Copyright (C) Ian McDonald 2005 [EMAIL PROTECTED] + * Copyright (C) Yoshifumi Nishida 2005 + * + * This software may be distributed either under the terms

Re: [tcpdump-workers] [PATCH] DCCP support

. Can you please accept this into the tcpdump program or advise what else needs to be done? More information on DCCP can be obtained at http://wlug.org.nz/DCCP Regards, Ian On 03/08/05, Guy Harris [EMAIL PROTECTED] wrote: Ian McDonald wrote: +#define __LITTLE_ENDIAN_BITFIELD

Re: [tcpdump-workers] [PATCH] DCCP support

Guy, Comments in line. On 03/08/05, Guy Harris [EMAIL PROTECTED] wrote: The fact that __LITTLE_ENDIAN_BITFIELD is predefined means that the code assumes that bitfields are stored in an order such that in u_int8_tdccph_cscov:4, dccph_ccval:4;

[tcpdump-workers] [PATCH] DCCP support

+1200 @@ -0,0 +1,186 @@ +#ifndef __DCCP_HDR__ +#define __DCCP_HDR__ +/* + * Copyright (C) Arnaldo Carvalho de Melo 2004 + * Copyright (C) Ian McDonald 2005 + * + * This software may be distributed either under the terms of the + * BSD-style license that accompanies tcpdump or the GNU GPL version 2