Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-30 Thread Tyson Key
Hi again, Guy. I've just been doing some strace-ing, and it appears to doing a "open("/dev/usbmon2", O_RDONLY|O_LARGEFILE) = 3". Not sure if the script log will be of use to you, although I'll attach it anyway. Going to try the printf() kludge soon. Tyson. On Thu, Oct 30, 2008 at 12:27 AM, Guy Ha

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-30 Thread Tyson Key
Bad form to reply to my own mail, I know, although the output of "tcpdump -V" is as follows if it helps: tcpdump version 3.9-PRE-CVS_2008_10_27 libpcap version 0.9-PRE-CVS Thanks. On Thu, Oct 30, 2008 at 12:33 PM, Tyson Key <[EMAIL PROTECTED]> wrote: > Hi again, Guy. I've just been doing some st

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Guy Harris
On Oct 29, 2008, at 1:16 PM, Tyson Key wrote: Also, is it considered normal for Linux 2.6.25 and above (or libpcap, although I'm not sure exactly what to blame) to truncate large numbers of USB packets? (I assume this has been hashed to death on the list in the past, though). Paolo? Cou

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Tyson Key
Hi Guy. Yes, that (defaulting to the maximum allowed by the protocol/system) was what I'm referring to. Also, is it considered normal for Linux 2.6.25 and above (or libpcap, although I'm not sure exactly what to blame) to truncate large numbers of USB packets? (I assume this has been hashed to deat

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Guy Harris
On Oct 29, 2008, at 10:48 AM, Tyson Key wrote: It seems to work fine now, although I could probably do with automatically setting the "snaplen" somehow. I.e., defaulting to the maximum (65535) rather than the current default of 64 (without IPv6) or 96 (with IPv6)? At least one OS that d

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Tyson Key
Hi, thanks for the tip (it was probably an oversight on my part, since I didn't know about that limitation). It seems to work fine now, although I could probably do with automatically setting the "snaplen" somehow. Thanks. On Tue, Oct 28, 2008 at 11:54 PM, Guy Harris <[EMAIL PROTECTED]> wrote: >

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-28 Thread Guy Harris
On Oct 28, 2008, at 2:05 PM, Tyson Key wrote: Hi, nice to see a shiny new release of libpcap and tcpdump so soon. Out of interest, is the "tcpdump: unsupported data link type USB_LINUX" bug/issue resolved when trying to capture USB traffic on a Linux box? If you mean "if I try to capture U

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-28 Thread Tyson Key
Hi, nice to see a shiny new release of libpcap and tcpdump so soon. Out of interest, is the "tcpdump: unsupported data link type USB_LINUX" bug/issue resolved when trying to capture USB traffic on a Linux box? (I'm using Fedora 8 at present, with the CVS version of libpcap, although I'm about to tr

[tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-27 Thread Ken Bantoft
Hi, Thanks to last minute checkins from Guy, tcpdump 4.0.0 + libpcap 1.0.0 are now released and available at http://www.tcpdump.org Release Notes: tcpdump 4.0.0 - http://www.tcpdump.org/tcpdump-changes.txt libpcap 1.0.0 - http://www.tcpdump.org/libpcap-changes.txt As always, please check t