[tcpdump-workers] [PATCH] DCCP support

2005-08-02 Thread Ian McDonald
.0 +1200 @@ -0,0 +1,186 @@ +#ifndef __DCCP_HDR__ +#define __DCCP_HDR__ +/* + * Copyright (C) Arnaldo Carvalho de Melo 2004 + * Copyright (C) Ian McDonald 2005 + * + * This software may be distributed either under the terms of the + * BSD-style license that accompanies tcpdump or the GNU GPL

Re: [tcpdump-workers] [PATCH] DCCP support

2005-08-03 Thread Ian McDonald
Guy, Comments in line. On 03/08/05, Guy Harris <[EMAIL PROTECTED]> wrote: > > The fact that __LITTLE_ENDIAN_BITFIELD is predefined means that the code > assumes that bitfields are stored in an order such that in > > u_int8_tdccph_cscov:4, > dccph_ccval:4

Re: [tcpdump-workers] [PATCH] DCCP support

2005-09-04 Thread Ian McDonald
was asked. Can you please accept this into the tcpdump program or advise what else needs to be done? More information on DCCP can be obtained at http://wlug.org.nz/DCCP Regards, Ian On 03/08/05, Guy Harris <[EMAIL PROTECTED]> wrote: > Ian McDonald wrote: > > > +#def

Re: [tcpdump-workers] [PATCH] DCCP support

2005-09-05 Thread Ian McDonald
lease find attached new patch. Regards, Ian diff -urN tcpdump-2005.08.22/dccp.h dccpdump/dccp.h --- tcpdump-2005.08.22/dccp.h 1970-01-01 12:00:00.0 +1200 +++ dccpdump/dccp.h 2005-09-06 10:24:24.276683776 +1200 @@ -0,0 +1,136 @@ +#ifndef __DCCP_HDR__ +#define __DCCP_HDR__ +/* + * Copyright (C) Arna

[tcpdump-workers] [PATCH] DCCP support - revised

2005-09-13 Thread Ian McDonald
Guy, Please find attached a slightly revised patch to tidyup a bug with seqno/ackno processing. Regards, Ian On 06/09/05, Ian McDonald <[EMAIL PROTECTED]> wrote: > Guy, > > Comments inline. > > > "dh_end" still isn't being used, as per my original comme

Re: [tcpdump-workers] [PATCH] DCCP support - revised

2005-09-19 Thread Ian McDonald
On 20/09/05, Guy Harris <[EMAIL PROTECTED]> wrote: > Ian McDonald wrote: > > > Please find attached a slightly revised patch to tidyup a bug with > > seqno/ackno processing. > > Checked into the main and x.9 branches. I got rid of the dh_end > variable, and a

[tcpdump-workers] [PATCH] DCCP - print all ACKs

2005-11-03 Thread Ian McDonald
Can this please be added to tcpdump? Regards, Ian -- Ian McDonald http://wand.net.nz/~iam4 WAND Network Research Group University of Waikato New Zealand diff -uprN -X dontdiff tcpdump-2005.10.03/print-dccp.c dccpdump/print-dccp.c --- tcpdump-2005.10.03/print-dccp.c 2005-09-20 18:25:20.0

Re: [tcpdump-workers] [PATCH] DCCP - print all ACKs

2005-11-03 Thread Ian McDonald
On 04/11/05, Hannes Gredler <[EMAIL PROTECTED]> wrote: > checked into HEAD; > > who is going to receive credit/blame for this patch ? > > andrea, ian or both ? > Both -- Ian McDonald http://wand.net.nz/~iam4 WAND Network Research Group University of Waikato New Zeala

Re: [tcpdump-workers] 3.9.4 assumes IPv6 enabled

2005-11-10 Thread Ian McDonald
king further) does the buffering for both IPv4 and IPv6 (there is a comment saying that!). It uses the in6_addr structure because that would be bigger than IPv4 so could hold both. Saves having two different parts of code doing basically the same thing. There would probably be a cast when it is use

Re: [tcpdump-workers] Strange behavior of pcap filter

2006-04-06 Thread Ian McDonald
P here. TCP/IP combines small packets to make more efficient use of the network. If you use the TCP_NODELAY socket option it won't do this. > Is there any way I can capture packets efficiently with rate as high as 40 > msec? > This should be no problem at all -- Ian McDonald Web:

Re: [tcpdump-workers] accessing IP packet header

2006-06-15 Thread Ian McDonald
t that information for each IP type of packet. Thanks in advance to everyone, zubin Hi there, I think libtrace from our research lab might be exactly what you want. Have a look at: http://research.wand.net.nz/software/libtrace.php Regards, Ian -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog

Re: [tcpdump-workers] regarding arp and rarp

2006-06-26 Thread Ian McDonald
> in tcpdump and modify it as necessary). Although I haven't tried it out, libnet (http://www.packetfactory.net/libnet/) looks like it can dissect ARP (along with a bunch of other protocols). Hope this helps, Richard - As does libtrace: http://research.wand.net.nz/software/libtrace.php -- Ia

Re: [tcpdump-workers] HTTP support in libpcap

2006-10-29 Thread Ian McDonald
btrace from our research group might be able to help: http://research.wand.net.nz/software/libtrace.php -- Ian McDonald Web: http://wand.net.nz/~iam4 Blog: http://imcdnzl.blogspot.com WAND Network Research Group Department of Computer Science University of Waikato New Zealand - This is the tcp

Re: [tcpdump-workers] [PATCH]: [DCCP]: support for variable-length checksums

2006-10-30 Thread Ian McDonald
EAD (incorrect -> xBEEF)' I would like to see this merged as a Linux kernel patch already exists for DCCP partial checksum coverage support. I would agree with this going ahead and in particular I remember the CCVAL bug and then forgetting to fix it... -- Ian McDonald Web: http://wand.n