dect
/
libpcap
Archived
13
0
Fork 0
PCAP Library with DECT support
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Patrick McHardy 481ab2d4a6 Merge branch 'master' of git://bpf.tcpdump.org/libpcap
Conflicts:
	pcap/bpf.h

Signed-off-by: Patrick McHardy <kaber@trash.net>
2011-01-10 14:44:29 +01:00
ChmodBPF To quote 2009-09-09 16:50:36 -07:00
SUNOS4 Initial revision 1999-10-07 23:46:40 +00:00
Win32 Fixes to compile WinPcap under MINGW32 and MINGW64. 2010-10-15 01:42:59 -07:00
bpf/net Fix check for a constant 0 argument to BPF_DIV. 2010-04-21 02:20:48 -07:00
doc documentation for proposed pcap format 2004-04-05 20:26:58 +00:00
lbl Get rid of a bogus */ in the middle of a comment. 2002-08-02 03:24:15 +00:00
missing Move "snprintf.c" to the "missing" directory, as that's where 2004-04-05 22:43:50 +00:00
msdos From Gisle Vanem: 2008-04-22 17:20:25 +00:00
packaging On Linux (and other platforms using the V7 man page conventions), we 2008-10-27 20:50:56 +00:00
pcap Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
tests Move test source to a tests directory, add a new test for nonblocking mode. 2010-03-31 12:39:35 -07:00
.cvsignore More files to ignore. 2008-10-23 22:14:38 +00:00
.gitignore Clean up handling of the "net" symlink made by the configure script. 2010-08-23 03:12:12 -07:00
CHANGES Mention the 802.15.4 changes. 2010-08-06 14:45:14 -07:00
CREDITS Fix alignment of Love's name. 2010-11-30 16:42:35 -08:00
INSTALL.txt Update the NeXTStEP, SCO UNIX/SCO OpenServer, and UnixWare information. 2008-06-12 20:21:51 +00:00
LICENSE added license file 2000-10-09 22:38:56 +00:00
Makefile.in Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
README Again, we're using Git now. 2010-02-08 11:26:05 -08:00
README.Win32 Again, we're using Git now. 2010-02-08 11:26:05 -08:00
README.aix Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
README.dag From Stephen Donnelly: 2006-04-07 07:07:25 +00:00
README.hpux Add to the beginning a note from Rick Jones that 11i (11.11) and later 2005-01-15 01:23:56 +00:00
README.linux Note that libpcap links with libnl by default - and that this shouldn't 2009-07-15 14:19:13 -07:00
README.macosx Put in a note about the Snow Leopard bug that requires that you have BPF 2009-09-09 17:36:06 -07:00
README.septel From Gilbert Hoyek <gil_hoyek@hotmail.com>: support for capturing SS7 2005-06-20 21:27:07 +00:00
README.sita The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
README.tru64 Pick up the "README.tru64" file from Ethereal, and change it to refer to 2001-01-24 06:52:52 +00:00
TODO Again, we're using Git now. 2010-02-08 11:26:05 -08:00
VERSION The first 1.2.x release will be 1.2.0, not 1.2. 2010-04-01 22:32:44 -07:00
aclocal.m4 On FreeBSD/SPARC64, use -fPIC - it's apparently necessary. 2010-05-29 19:27:49 -07:00
arcnet.h Fix up the RCS ID, and put in a line indicating the NetBSD header file 2001-04-24 02:17:52 +00:00
atmuni31.h Use VCI_ as a prefix for all the VCI values, rather than just prefixing 2007-10-22 19:28:58 +00:00
bpf_dump.c Make some arguments const pointers if that makes sense. 2008-01-02 04:16:46 +00:00
bpf_image.c Include headers that should cause u_int64_t to be defined. 2010-01-27 00:46:43 -08:00
chmod_bpf Add a script to change the permissions of /dev/bpf*, and a launchd plist 2008-05-28 02:14:10 +00:00
config.guess Update config.guess and config.sub to the latest versions. 2010-01-08 10:37:10 -08:00
config.h.in Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
config.sub Update config.guess and config.sub to the latest versions. 2010-01-08 10:37:10 -08:00
configure Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
configure.in Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
dlpisubs.c Don't define pcap_stream_err() if we're not going to use it. 2009-06-29 00:50:19 -07:00
dlpisubs.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
etherent.c Include headers that should cause u_int64_t to be defined. 2010-01-26 23:18:30 -08:00
ethertype.h Add "pppoed" and "pppoes" keywords, for PPPoE Discovery and Session 2005-09-05 09:06:58 +00:00
fad-getad.c Add a #include required on RHEL5. 2010-04-01 01:58:32 -07:00
fad-gifc.c Scan /proc/net/dev on Linux regardless of how we get the interface list. 2010-01-09 18:46:02 -08:00
fad-glifc.c From Sagun Shakya: fix typoes in comments. 2008-01-30 09:35:48 +00:00
fad-null.c Add _U_ to "rcsid[]" definitions, to eliminate "unused variable" 2003-11-15 23:23:57 +00:00
fad-sita.c The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
fad-win32.c Add pcap_platform_finddevs() to WinPcap. 2007-09-25 20:34:36 +00:00
gencode.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
gencode.h Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
grammar.y Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
ieee80211.h Support OpenBSD's "addr1", "addr2", "addr3", and "addr4" link-layer 2007-11-18 02:03:52 +00:00
inet.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
install-sh Initial revision 1999-10-07 23:46:40 +00:00
llc.h Add a "netbeui" keyword, which selects NetBEUI packets (LLC packets with 2001-01-28 09:44:48 +00:00
mkdep In some Solaris distributions, gcc is in /usr/sfw/bin. Look there for 2007-10-16 11:35:53 +00:00
nametoaddr.c From Gisle Vanem: 2009-02-14 14:36:34 -08:00
nlpid.h add BPF_ filters for misc. IS-IS PDU Types 2002-12-06 00:01:33 +00:00
optimize.c Include headers that should cause u_int64_t to be defined. 2010-01-26 20:28:51 -08:00
org.tcpdump.chmod_bpf.plist This is probably the right way to run something once at startup time; it 2008-06-05 08:10:59 +00:00
pcap-bpf.c Fix a problem that shows up with a max packet count passed to pcap_dispatch(). 2010-09-01 00:36:07 -07:00
pcap-bpf.h Add RCS IDs. 2007-04-01 21:43:55 +00:00
pcap-bt-linux.c Do filtering on USB and Bluetooth capturing. 2010-06-04 10:48:16 -07:00
pcap-bt-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-can-linux.c Fix some problems pointed out by compiler warnings. 2009-12-31 15:10:02 -08:00
pcap-can-linux.h Add support for CANbus capture. 2009-12-29 01:04:20 -08:00
pcap-common.c Add DLT_DBUS, for raw D-Bus messages. 2010-11-15 08:57:38 -08:00
pcap-common.h Byte-swap the extra fields in the "version 1" USB monitor header. 2010-01-25 15:12:43 -08:00
pcap-config.1 Add a --additional-libs flag to pcap-config, to write out any additional 2009-05-22 16:04:25 -07:00
pcap-config.in Use config.status to generate pcap-config. 2010-11-30 16:06:14 -08:00
pcap-dag.c handle->md.stat should be zeroed out when we initially allocated the 2009-09-07 16:48:26 -07:00
pcap-dag.h Updating Endace DAG ERF support. 2009-05-04 16:32:52 +12:00
pcap-dect-linux.c Import pcap-dect-linux 2010-10-15 02:21:10 +02:00
pcap-dect-linux.h Import pcap-dect-linux 2010-10-15 02:21:10 +02:00
pcap-dlpi.c Treat either EPERM or EACCES as "no soup for you". 2010-09-21 02:46:53 -07:00
pcap-dos.c From Gisle Vanem: 2008-04-22 17:16:30 +00:00
pcap-dos.h From Gisle Vanem: MS-DOS support. 2004-12-18 08:52:08 +00:00
pcap-enet.c Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap-filter.manmisc.in Add support for "wlan ra" and "wlan ta". 2010-07-03 13:15:01 -07:00
pcap-int.h Add support for setting the time stamp type for a capture. 2010-08-22 17:36:27 -07:00
pcap-libdlpi.c Treat either EPERM or EACCES as "no soup for you". 2010-09-21 02:46:53 -07:00
pcap-linktype.manmisc.in Hyphenate "link-layer" everywhere. 2009-11-16 12:01:24 -08:00
pcap-linux.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
pcap-namedb.h Add a cautionary note to OS vendors here as well. 2006-10-04 18:13:32 +00:00
pcap-nit.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-null.c Update to the new style, wherein each capture type has its own 2009-02-14 14:13:52 -08:00
pcap-pf.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-savefile.manfile.in Add LINKTYPE_ names to the pcap-linktype man page, and include the 2008-10-24 07:33:50 +00:00
pcap-septel.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-septel.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-sita.c Turn close_op into cleanup_op; the routine that handles it can also be 2008-04-14 20:40:58 +00:00
pcap-sita.h The SITA code in pcap-linux.c shares very little with the Linux code; 2008-01-06 20:23:17 +00:00
pcap-sita.html Again, Git, not CVS. 2010-02-08 15:57:58 -08:00
pcap-snf.c Add Myricom SNF API support as a new pcap device. 2010-01-26 11:58:37 -08:00
pcap-snf.h Add Myricom SNF API support as a new pcap device. 2010-01-26 11:58:37 -08:00
pcap-snit.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-snoop.c If an activate routine fails, it needs to clean up the pcap_t, close 2009-09-21 10:45:09 -07:00
pcap-stdinc.h Don't define or use any of the SIZEOF_ values. 2010-04-04 13:48:11 -07:00
pcap-tstamp.manmisc.in Give the names, as well as the #defines, for time stamp types. 2010-08-23 15:36:30 -07:00
pcap-usb-linux.c Check whether we have <linux/compiler.h>. 2010-11-25 14:06:01 -08:00
pcap-usb-linux.h From Paolo Abeni and me: split pcap_open_live() into a "get a pcap_t 2008-04-04 19:37:44 +00:00
pcap-win32.c Another fix for the compilation of WinPcap under MINGW32/MINGW64. 2010-10-15 16:44:32 -07:00
pcap.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap.c Merge branch 'master' of git://bpf.tcpdump.org/libpcap 2011-01-10 14:44:29 +01:00
pcap.h Put the public libpcap headers into a pcap subdirectory in both the 2006-10-04 18:09:21 +00:00
pcap1.h Fix more patches@tcpdump.org references to point to the SourceForge 2008-05-30 01:43:21 +00:00
pcap_activate.3pcap Return PCAP_ERROR_PROMISC_PERM_DENIED if you have permission to open the 2010-09-21 02:07:05 -07:00
pcap_breakloop.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_can_set_rfmon.3pcap Add some additional SEE ALSO references. 2010-08-22 15:08:20 -07:00
pcap_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_compile.3pcap.in Add a #define for 0xffffffff as PCAP_NETMASK_UNKNOWN, for use when you 2009-12-01 19:23:21 -08:00
pcap_create.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_datalink.3pcap.in Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_datalink_name_to_val.3pcap Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_datalink_val_to_name.3pcap Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_dump.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_close.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_flush.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_ftell.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_dump_open.3pcap.in Add a man page describing the pcap file format. 2008-10-23 05:56:59 +00:00
pcap_file.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_fileno.3pcap Describe all the cases where pcap_fileno() returns a file descriptor and 2009-11-03 14:18:11 -08:00
pcap_findalldevs.3pcap Add some additional SEE ALSO references. 2010-08-22 15:08:20 -07:00
pcap_freecode.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_get_selectable_fd.3pcap Give N. Leiten credit for the poll() exceptional condition checks in 2009-10-12 17:21:02 -07:00
pcap_geterr.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_inject.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_is_swapped.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lib_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_list_datalinks.3pcap.in Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_list_tstamp_types.3pcap.in Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
pcap_lookupdev.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_lookupnet.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_loop.3pcap Another change from Debian. 2008-12-25 02:01:32 +00:00
pcap_major_version.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_next_ex.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_offline_filter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_open_dead.3pcap.in Don't hard-wire section 4 as the section for the pcap-filter and 2008-10-21 07:33:01 +00:00
pcap_open_live.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_open_offline.3pcap.in Mention that we can read some pcap-ng files. 2010-01-09 17:06:10 -08:00
pcap_set_buffer_size.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_datalink.3pcap Consistently use "link-layer header type". 2010-08-22 15:26:35 -07:00
pcap_set_promisc.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_rfmon.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_snaplen.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_timeout.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_set_tstamp_type.3pcap.in If the specified time stamp type isn't supported, treat that as a warning. 2010-08-22 19:09:50 -07:00
pcap_setdirection.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_setfilter.3pcap Pick up pcap_offline_filter() from WinPcap. 2008-05-13 15:19:56 +00:00
pcap_setnonblock.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_snapshot.3pcap Document the new API's, move a bunch of information about libpcap 2008-04-06 02:53:21 +00:00
pcap_stats.3pcap From Dustin Spicuzza: support ps_ifdrop on Linux, using /proc/net/dev. 2009-09-07 16:23:15 -07:00
pcap_statustostr.3pcap Rename pcap_errtostr() to pcap_statustostr(), and have it handle 2008-04-09 21:39:21 +00:00
pcap_strerror.3pcap Include <pcap/pcap.h> in the SUMMARY sections - as long as we're going 2008-04-05 20:26:56 +00:00
pcap_tstamp_type_name_to_val.3pcap Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
pcap_tstamp_type_val_to_name.3pcap Add support for setting the time stamp type for a capture. 2010-08-22 16:58:53 -07:00
ppp.h The DLT_LINUX_PPP_WITHDIRECTION is also used for pppd on some BSDs, so 2005-02-08 19:52:18 +00:00
runlex.sh Add --nounput if Flex supports the --noFUNCTION options, as at least 2007-12-31 03:38:39 +00:00
savefile.c Reject attempts to put savefiles into non-blocking mode. 2010-05-28 20:39:09 -07:00
scanner.l Fixes to compile WinPcap under MINGW32 and MINGW64. 2010-10-15 01:42:59 -07:00
sf-pcap-ng.c Interface IDs are 0-origin. 2010-12-28 13:15:26 -08:00
sf-pcap-ng.h Add limited support for reading pcap-ng files. 2010-01-09 16:58:15 -08:00
sf-pcap.c Added the definition of SET_BINMODE under WIN32. 2010-03-09 12:27:31 -08:00
sf-pcap.h Add limited support for reading pcap-ng files. 2010-01-09 16:58:15 -08:00
sunatmpos.h Add SunATM support, based on code from Yen Yen Lim at North Dakota State 2002-07-11 09:06:30 +00:00

README

@(#) $Header: /tcpdump/master/libpcap/README,v 1.34 2008-12-14 19:44:14 guy Exp $ (LBL)

LIBPCAP 1.x.y

www.tcpdump.org

Please send inquiries/comments/reports to:
	tcpdump-workers@lists.tcpdump.org

Anonymous Git is available via:
	git clone git://bpf.tcpdump.org/libpcap

Version 1.x.y of LIBPCAP can be retrieved with the CVS tag "libpcap_1_{x}rel{y}":
	cvs -d :pserver:tcpdump@cvs.tcpdump.org:/tcpdump/master checkout -r libpcap_1_{x}rel{y} libpcap

Please submit patches against the master copy to the libpcap project on
sourceforge.net.

formerly from 	Lawrence Berkeley National Laboratory
		Network Research Group <libpcap@ee.lbl.gov>
		ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4)

This directory contains source code for libpcap, a system-independent
interface for user-level packet capture.  libpcap provides a portable
framework for low-level network monitoring.  Applications include
network statistics collection, security monitoring, network debugging,
etc.  Since almost every system vendor provides a different interface
for packet capture, and since we've developed several tools that
require this functionality, we've created this system-independent API
to ease in porting and to alleviate the need for several
system-dependent packet capture modules in each application.

For some platforms there are README.{system} files that discuss issues
with the OS's interface for packet capture on those platforms, such as
how to enable support for that interface in the OS, if it's not built in
by default.

The libpcap interface supports a filtering mechanism based on the
architecture in the BSD packet filter.  BPF is described in the 1993
Winter Usenix paper ``The BSD Packet Filter: A New Architecture for
User-level Packet Capture''.  A compressed PostScript version can be
found at

	ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Z

or

	http://www.tcpdump.org/papers/bpf-usenix93.ps.Z

and a gzipped version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.ps.gz

A PDF version can be found at

	http://www.tcpdump.org/papers/bpf-usenix93.pdf

Although most packet capture interfaces support in-kernel filtering,
libpcap utilizes in-kernel filtering only for the BPF interface.
On systems that don't have BPF, all packets are read into user-space
and the BPF filters are evaluated in the libpcap library, incurring
added overhead (especially, for selective filters).  Ideally, libpcap
would translate BPF filters into a filter program that is compatible
with the underlying kernel subsystem, but this is not yet implemented.

BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD.  DEC
OSF/1/Digital UNIX/Tru64 UNIX uses the packetfilter interface but has
been extended to accept BPF filters (which libpcap utilizes).  Also, you
can add BPF filter support to Ultrix using the kernel source and/or
object patches available in:

	ftp://gatekeeper.dec.com/pub/DEC/net/bpfext42.tar.Z.

Linux, in the 2.2 kernel and later kernels, has a "Socket Filter"
mechanism that accepts BPF filters; see the README.linux file for
information on configuring that option.

Note to Linux distributions and *BSD systems that include libpcap:

There's now a rule to make a shared library, which should work on Linux 
and *BSD, among other platforms.

It sets the soname of the library to "libpcap.so.1"; this is what it 
should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as 
that.

We've been maintaining binary compatibility between libpcap releases for 
quite a while; there's no reason to tie a binary linked with libpcap to 
a particular release of libpcap.

Problems, bugs, questions, desirable enhancements, etc. should be sent
to the address "tcpdump-workers@lists.tcpdump.org".  Bugs, support
requests, and feature requests may also be submitted on the SourceForge
site for libpcap at

	http://sourceforge.net/projects/libpcap/

Source code contributions, etc. should be sent to the email address
submitted as patches on the SourceForge site for libpcap.

Current versions can be found at www.tcpdump.org, or the SourceForge
site for libpcap.

 - The TCPdump team