On Jan 9, 2008, at 3:37 PM, lei wei wrote:
I'm actually trying to get Argus working with DAG but argus still
can't read
anything from it. Do you have any experience on it?
No, I don't.
From a quick look at the source to Argus 2.0.6, it appears to be
assuming that you can do a select() on the result of pcap_fileno(),
which, as far as I know, is *NOT* the case for DAG devices; I don't
think the DAG driver supports select() or poll(). That might cause it
(and other applications using select() or poll() on pcap streams)
never to see any incoming packets, or to fail in other ways.
Newer versions of libpcap (including 0.9.x) have
pcap_get_selectable_fd(), which returns a file descriptor on which you
can do select(), if such a descriptor exists, or -1, if no such file
descriptor exists.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
