Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-30 Thread Tyson Key
Bad form to reply to my own mail, I know, although the output of tcpdump -V is as follows if it helps: tcpdump version 3.9-PRE-CVS_2008_10_27 libpcap version 0.9-PRE-CVS Thanks. On Thu, Oct 30, 2008 at 12:33 PM, Tyson Key [EMAIL PROTECTED] wrote: Hi again, Guy. I've just been doing some

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-30 Thread Tyson Key
Hi again, Guy. I've just been doing some strace-ing, and it appears to doing a open(/dev/usbmon2, O_RDONLY|O_LARGEFILE) = 3. Not sure if the script log will be of use to you, although I'll attach it anyway. Going to try the printf() kludge soon. Tyson. On Thu, Oct 30, 2008 at 12:27 AM, Guy

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Tyson Key
Hi, thanks for the tip (it was probably an oversight on my part, since I didn't know about that limitation). It seems to work fine now, although I could probably do with automatically setting the snaplen somehow. Thanks. On Tue, Oct 28, 2008 at 11:54 PM, Guy Harris [EMAIL PROTECTED] wrote: On

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Guy Harris
On Oct 29, 2008, at 10:48 AM, Tyson Key wrote: It seems to work fine now, although I could probably do with automatically setting the snaplen somehow. I.e., defaulting to the maximum (65535) rather than the current default of 64 (without IPv6) or 96 (with IPv6)? At least one OS that

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-29 Thread Guy Harris
On Oct 29, 2008, at 1:16 PM, Tyson Key wrote: Also, is it considered normal for Linux 2.6.25 and above (or libpcap, although I'm not sure exactly what to blame) to truncate large numbers of USB packets? (I assume this has been hashed to death on the list in the past, though). Paolo?

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-28 Thread Tyson Key
Hi, nice to see a shiny new release of libpcap and tcpdump so soon. Out of interest, is the tcpdump: unsupported data link type USB_LINUX bug/issue resolved when trying to capture USB traffic on a Linux box? (I'm using Fedora 8 at present, with the CVS version of libpcap, although I'm about to try

Re: [tcpdump-workers] tcpdump 4.0.0 + libpcap 1.0.0 Released

2008-10-28 Thread Guy Harris
On Oct 28, 2008, at 2:05 PM, Tyson Key wrote: Hi, nice to see a shiny new release of libpcap and tcpdump so soon. Out of interest, is the tcpdump: unsupported data link type USB_LINUX bug/issue resolved when trying to capture USB traffic on a Linux box? If you mean if I try to capture USB