Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-07 Thread Gert Doering via tcpdump-workers
ubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de --- End Message --- ___ tc

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-07 Thread Gert Doering via tcpdump-workers
ted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de --- End Message --- ___ tc

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-07 Thread Gert Doering via tcpdump-workers
a man page patch as well :) ) gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-07 Thread Gert Doering via tcpdump-workers
ot;(bp)". Copy-pasted that line from print-gre.c, and only changed the first "bp" to "p. gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a com

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a H

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
--- Begin Message --- Hi, On Tue, May 05, 2020 at 07:28:28PM +0200, Francois-Xavier Le Bail wrote: > On 05/05/2020 12:15, Gert Doering via tcpdump-workers wrote: > > In my case, there is an MPLS control word before the ethernet header > > (" "), and if I skip that

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
ple took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Mu

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de --- End Message --- ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
--- Begin Message --- Hi, On Tue, May 05, 2020 at 04:45:04PM +0200, Francois-Xavier Le Bail wrote: > On 05/05/2020 12:15, Gert Doering via tcpdump-workers wrote: > > 12:11:46.116238 MPLS (label 105, exp 0, ttl 254) (label 24003, exp 0, [S], > > ttl 254) IP 10.27.99.2 > 10.2

Re: [tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
--- Begin Message --- Hi, On Tue, May 05, 2020 at 05:50:40AM -0400, Gert Doering via tcpdump-workers wrote: > Now, the two questions: > > - is there a switch I'm missing to decode packets-in-MPLS? > (like, "packets in GRE" get decoded already) > - if not, i

[tcpdump-workers] decode MPLS-contained packets?

2020-05-05 Thread Gert Doering via tcpdump-workers
lready working on it? I might just hack it in, if not... thanks :) gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor."

Re: [tcpdump-workers] Legacy non-Linux support

2019-10-07 Thread Gert Doering
ome out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de ___ tcpdump-workers mailing

Re: [tcpdump-workers] [tcpdump-security] [libpcap] Problem with version 1.9.0

2018-07-23 Thread Gert Doering
"If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert

Re: [tcpdump-workers] BUG FOUNDED (CANT STOP PROCESS)

2016-12-08 Thread Gert Doering
characters. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de ___

[tcpdump-workers] incorrect tcp checksum on Linux tun interfaces?

2012-12-04 Thread Gert Doering
! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org

Re: [tcpdump-workers] incorrect tcp checksum on Linux tun interfaces?

2012-12-04 Thread Gert Doering
Hi, On Tue, Dec 04, 2012 at 11:09:43AM -0500, Michael Richardson wrote: {sorry if I'm a bit tardy at removing the emergency moderation that I turned on in order to keep junk off the list} I understand that, which I wasn't bugging anyone about this :-) Gert == Gert Doering g

Re: [tcpdump-workers] Multifile patch

2012-09-04 Thread Gert Doering
that doing: VFile=stdin; was the best way? This is well-defined. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89

Re: [tcpdump-workers] tcpdump dissector for IP protocol 97 (EtherIP)?

2011-04-28 Thread Gert Doering
Hi, On Wed, Apr 27, 2011 at 03:25:40PM -0400, Michael Richardson wrote: Gert == Gert Doering g...@greenie.muc.de writes: Gert is someone already working on a tcpdump dissector for IP Gert protocol 97 (ethernet tunneled over IP, RFC 3378)? Lack of answer suggests that the answer

[tcpdump-workers] tcpdump dissector for IP protocol 97 (EtherIP)?

2011-04-16 Thread Gert Doering
duplication of work. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu

Re: [tcpdump-workers] bandwidth by user or process id

2010-10-06 Thread Gert Doering
where there is a central server that accepts a given connection, and then forks a child to handle this connection (sharing the file descriptor for a moment). gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert

Re: [tcpdump-workers] bandwidth by user or process id

2010-10-05 Thread Gert Doering
/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] tcp sequence and ack number with libpcap

2010-08-19 Thread Gert Doering
the beginning of the flow, instead of the absolute numbers. From a brief glance, your code looks fine to me. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g

Re: [tcpdump-workers] tcp sequence and ack number with libpcap

2010-08-19 Thread Gert Doering
(), not htonl(). On standard platforms with byte order 1234 or 4321, there is no difference. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g

Re: [tcpdump-workers] deduct local IP address from cap-file

2010-05-03 Thread Gert Doering
on behalf of others. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g

Re: [tcpdump-workers] forces (and sctp) patch

2010-01-19 Thread Gert Doering
network issues caused by packet loss / reordering. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025

Re: [tcpdump-workers] Libpcap on VMWare

2010-01-13 Thread Gert Doering
part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de - This is the tcpdump-workers list. Visit https

Re: [tcpdump-workers] does port 25 work?

2008-08-02 Thread Gert Doering
and all the other possible variants of packet tunnels... I'd rather not go that way. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED

Re: [tcpdump-workers] does port 25 work?

2008-08-01 Thread Gert Doering
! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Should we enable IPv6 support by default?

2008-02-06 Thread Gert Doering
! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Should we enable IPv6 support by default?

2008-02-06 Thread Gert Doering
can do tcpdump to look at spanning tree packets. Or Cisco CDP. Neither is supported in my operating system...) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [tcpdump-workers] Should we enable IPv6 support by default?

2008-02-06 Thread Gert Doering
Hi, On Wed, Feb 06, 2008 at 12:58:49PM -0800, Guy Harris wrote: Gert Doering wrote: tcpdump is not actually *doing* any IPv6. It's doing IPv6 name resolution. OK, good argument. Some IPv6 related stuff without actually sending IPv6 packets (unless the resolver library does it internally

Re: [tcpdump-workers] [patch] Teach tcpdump to recognize new OpenBSD pflog packets

2007-09-28 Thread Gert Doering
applications that use libpcap at the same time, like wireshark from the ports. Would the pflog change then break the applications? gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [tcpdump-workers] tcpdump output format

2006-03-08 Thread Gert Doering
/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

[tcpdump-workers] misprinting of GRE tunneled packets on NetBSD Sparc64

2005-07-26 Thread Gert Doering
of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://lists.sandelman.ca

Re: [tcpdump-workers] misprinting of GRE tunneled packets on NetBSD Sparc64

2005-07-26 Thread Gert Doering
/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] print GRE over IPv6 packets

2005-07-03 Thread Gert Doering
; - /hannes Thanks. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED

Re: [tcpdump-workers] print GRE over IPv6 packets

2005-07-02 Thread Gert Doering
Hi, On Sat, Jul 02, 2005 at 11:45:56AM +0200, Gert Doering wrote: I'm working on adding Cisco-compatible GRE over IPv6 tunneling, and ... to NetBSD, that is :-) (just in case you were wondering adding *to what*?). gert -- USENET is *not* the non-clickable part of WWW

Re: [tcpdump-workers] fddipad on NetBSD

2005-04-07 Thread Gert Doering
on 2.0.2 on Sparc64. I also have -current sources here, to check header file changes or whatever. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL

Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Gert Doering
/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] can't do CVS checkouts/updates anymore

2005-02-08 Thread Gert Doering
/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] can't do CVS checkouts/updates anymore

2005-02-08 Thread Gert Doering
:-) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers

Re: [tcpdump-workers] can't do CVS checkouts/updates anymore

2005-02-07 Thread Gert Doering
... If you (or anyone else) wants to send their IP address, I can insert it into hosts.allow. I'll even take /24s if you don't have a static. Please add 193.149.48.160/27 for me (Gert Doering, [EMAIL PROTECTED]). This /27 is statically assigned to me, and I use various machines out

[tcpdump-workers] can't do CVS checkouts/updates anymore

2005-02-03 Thread Gert Doering
! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025[EMAIL PROTECTED] - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.