Jon, As far as I can determine, EFAULT is raised by the AIX BPF driver whenever packets have been dropped since the last successful read. I suspect that the best approach would be to add another case to the switch after the read in pcap_read() to ignore EFAULT just as EINTR is already ignored.
Another option is to configure libpcap to use the DLPI support on AIX as described in the libpcap README.aix. The DL_PROMISC_MULTI warning message appears to be due to a problem in the AIX DLPI support which has never been fixed in 4.3.3 or 5.1 AFAIK, so I believe that you will never see any outbound packets using the DLPI driver on AIX. Inbound seems to work OK. The problem that I described regarding BIOCSETIF disappeared after a reboot and never returned, so I wouldn't worry about it. Regards, Don Ebright -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 26, 2002 5:10 PM To: [EMAIL PROTECTED] Subject: [tcpdump-workers] AIX 5.1, tcpdump 3.6.2 and libpcap 0.7.1 problem I've been trying to get a reliable, working tcpdump on AIX 5.1. The version shipping won't work for me (long story - I need the a capture file generated by a recent version of libpcap, so that we can perform a trace using another program which was linked against libpcap configured with dlpi... ug, if anyone's in NYC I'll buy them a beer and gripe about it). So, I built libpcap 0.7.1 (using bpf, not dlpi) and tcpdump 3.6.2. Things work, except after a few packets I get: tcpdump: pcap_loop: read: Bad address I took a look around, and found this suggestion: http://www.tcpdump.org/lists/workers/2002/02/msg00046.html I tried it out, and the params fed to read() seem okay from what I can see (well, besides the errno==EFAULT): tcpdump: listening on en2 buf 202c1f38, count 16384, errno 14 tcpdump: pcap_loop: read: Bad address Beyond this point, I'd have to do much research before I can figure out what's happening with the "p" struct used in pcap_read. Any suggestions? -- -Jon "As three unwavering bands of light, we were simple and separate and beautiful. As machines, we were flabby bags of ancient plumbing and wiring, of rusty hinges and feeble springs. And our interrelationships were Byzantine." - Kurt Vonnegut, Breakfast of Champions - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it. - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
