diff options
author | mcr <mcr> | 2000-06-11 16:39:20 +0000 |
---|---|---|
committer | mcr <mcr> | 2000-06-11 16:39:20 +0000 |
commit | 4b8a2a8ebc4dbdd0bac85c3f915043061b927218 (patch) | |
tree | 85f13be2f7cac25660a9d37b46d2f976f72bcc2c | |
parent | 71f07adc42377461c070a26668ee5ed23d1dd9d8 (diff) |
documentation patches from Guy re: LBL
-rw-r--r-- | INSTALL | 20 | ||||
-rw-r--r-- | README | 22 | ||||
-rw-r--r-- | pcap.3 | 15 |
3 files changed, 33 insertions, 24 deletions
@@ -1,4 +1,4 @@ -@(#) $Header: /tcpdump/master/libpcap/Attic/INSTALL,v 1.42.1.1 1999-10-07 23:46:40 mcr Exp $ (LBL) +@(#) $Header: /tcpdump/master/libpcap/Attic/INSTALL,v 1.42.1.1.2.1 2000-06-11 16:39:20 mcr Exp $ (LBL) To build libpcap, first customize any paths in Makefile.in, then run "./configure" (a shell script). The configure script will determine @@ -172,16 +172,16 @@ application. Also, packet timestamps aren't very good. This appears to be due to haphazard handling of the timestamp in the kernel. Note well: there is rumoured to be a version of tcpdump floating around -called 3.0.3 that includes libpcap and is supposed to support Linux. +called 3.0.3 that includes libpcap and is supposed to support Linux. You should be advised that the Network Research Group at LBNL never -generated a release with this version number. We note with interest -that a standard cracker trick to get people to install trojans is to -distribute bogus packages that have a version number higher than the -current release. We also note with annoyance that 90% of the Linux -related bug reports we get are due to changes made to unofficial -versions of our page. If you are having trouble but aren't using a -version that came from ftp.ee.lbl.gov, please try that before -submitting a bug report! +generated a release with this version number. The LBNL Network Research +Group notes with interest that a standard cracker trick to get people to +install trojans is to distribute bogus packages that have a version +number higher than the current release. They also noted with annoyance +that 90% of the Linux related bug reports they got are due to changes +made to unofficial versions of their page. If you are having trouble +but aren't using a version that came from tcpdump.org, please try that +before submitting a bug report! If you use AIX, you may not be able to build libpcap from this release. Although AIX 4 ships with tcpdump, it is an old version that predates @@ -1,10 +1,13 @@ -@(#) $Header: /tcpdump/master/libpcap/README,v 1.18.1.1 1999-10-07 23:46:40 mcr Exp $ (LBL) +@(#) $Header: /tcpdump/master/libpcap/README,v 1.18.1.1.2.1 2000-06-11 16:39:20 mcr Exp $ (LBL) -LIBPCAP 0.4 -Lawrence Berkeley National Laboratory -Network Research Group -libpcap@ee.lbl.gov -ftp://ftp.ee.lbl.gov/libpcap.tar.Z +LIBPCAP 0.5 +Now maintained by "The Tcpdump Group" +Send patches to patches@tcpdump.org +See www.tcpdump.org + +formerly from Lawrence Berkeley National Laboratory + Network Research Group <libpcap@ee.lbl.gov> + ftp://ftp.ee.lbl.gov/libpcap.tar.Z (0.4) This directory contains source code for libpcap, a system-independent interface for user-level packet capture. libpcap provides a portable @@ -33,7 +36,7 @@ added overhead (especially, for selective filters). Ideally, libpcap would translate BPF filters into a filter program that is compatible with the underlying kernel subsystem, but this is not yet implemented. -BPF is standard in 4.4BSD, BSD/386, NetBSD, and FreeBSD. DEC OSF/1 +BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, and OpenBSD. DEC OSF/1 uses the packetfilter interface but has been extended to accept BPF filters (which libpcap utilizes). Also, you can add BPF filter support to Ultrix using the kernel source and/or object patches available in: @@ -42,8 +45,5 @@ to Ultrix using the kernel source and/or object patches available in: Problems, bugs, questions, desirable enhancements, source code contributions, etc., should be sent to the email address -"libpcap@ee.lbl.gov". +"patches@tcpdump.org". - - Steve McCanne - Craig Leres - Van Jacobson @@ -225,6 +225,15 @@ controls whether optimization on the resulting code is performed. .I netmask specifies the netmask of the local net. .PP +.B pcap_compile_nopcap() +is similar to +.B pcap_compile() +except that instead of passing a pcap structure, one passes the +snaplen and linktype explicitly. It is intended to be used for +compiling filters for direct bpf usage, without necessarily having +called +.BR pcap_open() . +.PP .B pcap_setfilter() is used to specify a filter program. .I fp @@ -331,10 +340,10 @@ Craig Leres and Steven McCanne, all of the Lawrence Berkeley National Laboratory, University of California, Berkeley, CA. .LP -The current version is available via anonymous ftp: +The current version is available from "The Tcpdump Group"'s Web site at .LP .RS -.I ftp://ftp.ee.lbl.gov/libpcap.tar.Z +.I http://www.tcpdump.org/ .RE .SH BUGS -Please send bug reports to libpcap@ee.lbl.gov. +Please send bug reports to patches@tcpdump.org. |