Age | Commit message (Collapse) | Author | Files | Lines |
|
the BPF BIOCSRTIMEOUT bug in 64-bit mode, so we don't need to do our own
workaround in 10.6.5 or later.
svn path=/trunk/; revision=34841
|
|
svn path=/trunk/; revision=34601
|
|
As it's a constant, we can do the split into seconds and microseconds at
compile time, so do that (so that it works even if we happen to make
PIPE_READ_TIMEOUT >= 1 second).
svn path=/trunk/; revision=34283
|
|
we know it's < 1s, and don't have to worry about properly setting tv_sec
and tv_usec for select().
Get rid of unneeded pointer variable.
svn path=/trunk/; revision=34282
|
|
svn path=/trunk/; revision=34137
|
|
read access to the ringbuffer that dumpcap creates. That way, a group of people can access the capture files without having to use root access.
[1] http://www.wireshark.org/lists/wireshark-users/201008/msg00235.html
svn path=/trunk/; revision=33978
|
|
owner and group of the rest of the files in the ringbuffer.
svn path=/trunk/; revision=33977
|
|
Move the SetDllDirectory calls to ws_init_dll_search_path. If
SetDllDirectory fails, pass the Wireshark program path to
SetCurrentDirectory.
svn path=/trunk/; revision=33958
|
|
svn path=/trunk/; revision=33917
|
|
it's present in Wireshark and dumpcap. This takes care of the airpcap.dll
PoC but we need to load wpcap.dll from a full path. We might want to
call SetDllDirectory from our other executables as well.
svn path=/trunk/; revision=33916
|
|
around
show_filter_code(capture_options *capture_opts)
To fix a warning about an unused function.
svn path=/trunk/; revision=33519
|
|
svn path=/trunk/; revision=33517
|
|
svn path=/trunk/; revision=33515
|
|
svn path=/trunk/; revision=33514
|
|
open_captur_device() is an array of PCAP_ERRBUF_SIZE chars. That means
we don't need to pass the size.
Unfortunately, pcap_compile() didn't always take a "const char *" as the
filter string argument, even though it didn't modify the argument; don't
pass it a "const char *".
Don't print the secondary error message if it's empty.
svn path=/trunk/; revision=33513
|
|
If we get an "XXX is not one of the DLTs supported by this device" error
when we try to set the link-layer header type, don't tell the user to
report it to the Wireshark developers, as that's probably just the
result of them giving a link-layer header type that the device doesn't
support.
svn path=/trunk/; revision=33512
|
|
filter, as that affects the generated code.
svn path=/trunk/; revision=33510
|
|
capture filter in human-readable form. (Well, readable by humans who
know BPF machine language, at least. :-))
svn path=/trunk/; revision=33509
|
|
svn path=/trunk/; revision=33012
|
|
capturing, and thus even when we build without pcap.
svn path=/trunk/; revision=32988
|
|
Make SIGINFO a restart-the-system-call signal, so reads etc. don't
return an error.
svn path=/trunk/; revision=32968
|
|
and add support for SIGINFO, so, if your OS supports SIGINFO, you can
get the packet count by typing ^T.
svn path=/trunk/; revision=32958
|
|
capture-stopping/file-switching operation into a routine. Move a few
variables into the loop_data structure so that routine can get at them.
svn path=/trunk/; revision=32949
|
|
being the only program that needs to be linked with *pcap, that's when
we'd want to fetch that information, but there might be other libraries
(e.g., the POSIX capabilities library) that it might be linked with but
that programs that use it aren't linked with.
Don't commit to the output formats of -M, as they are, as noted, subject
to change from release to release.
svn path=/trunk/; revision=32904
|
|
svn path=/trunk/; revision=32883
|
|
Let pcap_statustostr()'s result suffice for most PCAP_ERROR_ errors.
Don't mention the capture device name multiple times in the error
message. Treat positive returns from pcap_can_set_rfmon() other than 0
or 1 as weird returns, not error returns.
svn path=/trunk/; revision=32882
|
|
svn path=/trunk/; revision=32856
|
|
svn path=/trunk/; revision=32854
|
|
svn path=/trunk/; revision=32853
|
|
return values are success-with-a-warning.
Report those errors with a string.
svn path=/trunk/; revision=32852
|
|
Add support for a machine-readable "-v" output, which prints only the
pcap version string.
Give a little more information about the machine-readable format, but
note that it's primarily intended for consumption by Wireshark and
TShark and is subject to change.
Properly hyphenate "pcap-ng".
svn path=/trunk/; revision=32851
|
|
supplying -M along with -Z. (We keep -M around for debugging use; it's
documented, unlike -Z.)
svn path=/trunk/; revision=32850
|
|
necessary.
If it's run with -D and -M, and we found no interfaces, don't treat that
as an error; let the code that reads our output just indicate it as "no
interfaces available", so *its* caller can decide whether to report an
error or not (in some cases in Wireshark, it's obvious that there are no
interfaces, e.g. there aren't any listed on the welcome screen, so
popping up a dialog is pointless).
svn path=/trunk/; revision=32849
|
|
interface statistics, have its error messages come out as sync-pipe
errors, have it send a sync-pipe "success" message on success, and have
the callers get that message and display it.
svn path=/trunk/; revision=32843
|
|
build without libpcap, to make sure that works, and then do a build with
libpcap, to put into a binary release. It's the former that's failing;
I'll back out the previous change and then work on that.
svn path=/trunk/; revision=32801
|
|
if_capabilities_t - it doesn't fail on Snow Leopard, even if I undefine
HAVE_PCAP_CREATE, and doesn't fail on the Leopard PPC buildbot, either.
svn path=/trunk/; revision=32799
|
|
monitor mode at the same time that we fetch its list of link-layer
types. Support fetching that list in monitor mode, as the list may be
different in regular and monitor mode. If the interface supports
monitor mode, when printing the list of link-layer types, indicate
whether they're fetched in monitor mode or not, as tcpdump 4.1.x does.
svn path=/trunk/; revision=32789
|
|
device, don't just execute whatever comes after the open code as an else
clause.
svn path=/trunk/; revision=32761
|
|
knows whether AF_INET6 is needed.
svn path=/trunk/; revision=32722
|
|
svn path=/trunk/; revision=32720
|
|
libpcap/WinPcap and the capture mechanism atop which they run might
either silently limit the buffer size to a smaller value or raise it to
a higher value - that's the part that's platform-dependent.
svn path=/trunk/; revision=32718
|
|
the code to print the machine-readable format into dumpcap, and have the
code in capture_opts.c just print the human-readable format.
svn path=/trunk/; revision=32714
|
|
standard error and, in Wireshark on Windows, create a console if
necessary. Have the cmdarg_err routines use them.
Use *fprintf_stderr() to print the output of -L, rather than using
cmdarg_err_cont(), so that we don't get extra newlines in the output (it
should look similar to the output of tcpdump).
svn path=/trunk/; revision=32711
|
|
interface by running dumpcap, so that if you need privileges to open an
interface, and dumpcap has those privileges, neither TShark nor
Wireshark need them.
svn path=/trunk/; revision=32710
|
|
support multiple, err, optional options.
svn path=/trunk/; revision=32705
|
|
svn path=/trunk/; revision=32702
|
|
svn path=/trunk/; revision=32701
|
|
can no longer state what the default is (it's platform-dependent).
svn path=/trunk/; revision=32700
|
|
pcap_set_buffer_size() did as well, so there aren't any libpcap releases
with pcap_create() but not pcap_set_buffer_size().
Only do one check for pcap_create.
svn path=/trunk/; revision=32695
|
|
svn path=/trunk/; revision=32694
|