> Slackware had the contrary evolution : keeping the good and stable library
> which is libc5 and upgrade to kernel 2.2.x . Slackware 4.0 is libc5 and
> 2.2.6 kernel based and dated 99/05/19.
Yeah, well, you've just discovered that "good" is a relative term; libc5
might be "good and stable", but it's also, apparently, *out of sync*
with the later kernels, so that some kernel features don't have C
library code and/or header files to allow them to be used from userland.
(What's *REALLY* irritating is that they *DO* appears to have a header
file that defines SO_ATTACH_FILTER but *DON'T* appear to have a header
for the PF_PACKET stuff, so that they *PARTIALLY* support some of the
kernel features in the C library. I'd call that "bogosity above and
beyond the call of duty"....)
> All that I want is a libpcap with the "any" keyword as interface name and a
> tcpdump without buffer overflow.
Then you'll have to repair Slackware 4.0's brokenness - i.e., the fact
that it has a kernel with PF_PACKET support, but no header files to let
you *use* PF_PACKET sockets - by hand, e.g. either by
1) grabbing a "netpacket/packet.h" header file from glibc2 and
installing it on your otherwise-libc5 system;
2) grabbing the kernel's "linux/if_packet.h" header file,
installing it as "/usr/include/netpacket/packet.h", and
making whatever changes are necessary to make it work;
3) installing glibc2 of some sort.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
