tcpdump mailing list archives

Re: tcpdump problem with DAG card


From: "lei wei" <weilei1983 () gmail com>
Date: Wed, 9 Jan 2008 18:37:18 -0500

Hi Guy,

I recompiled tcpdump again and it's working now. :)  Thanks for the help.

I'm actually trying to get Argus working with DAG but argus still can't read
anything from it. Do you have any experience on it?

Lei


On 1/9/08, lei wei <weilei1983 () gmail com> wrote:

Hi Guy,

In config.h file:
/* define if you have the DAG API */
#define HAVE_DAG_API 1

so I think it is set.

The output of ldd on tcpdump is:
$ ldd tcpdump
tcpdump:
        libcrypto.so.3 => /lib/libcrypto.so.3 (0x2810d000)
        libc.so.5 => /lib/libc.so.5 (0x28204000)

I don't know if or not libpcap should show up here. But I did notice the
output of ./configure when I compiled tcpdump before, it outputs "checking
for local pcap library... ./../libpcap-0.9.8/libpcap.a". That's exactly
the dag-enabled libpcap I installed.

Lei



 On 1/9/08, Guy Harris <guy () alum mit edu> wrote:


On Jan 9, 2008, at 2:04 PM, lei wei wrote:

I'm trying to get tcpdump work with DAG interface. I installed the
dag-enabled libpcap0.9.8 and tcpdump3.9.8 on a FreeBSD5.4 system.
When I
typed "tcpdump -i dag0", it gives me the error "tcpdump: BIOCSETIF:
dag0:
Device not configured". Could anyone give me any hint on what the
problem
is?

The problem is that the libpcap being used by tcpdump isn't DAG-
enabled for some reason; it's trying to attach to adapter "dag0" using
BPF, not using the DAG code.

Is HAVE_DAG_API set in config.h in the source directory for the
libpcap you built?  If so, what does "ldd" print when you run it on
the tcpdump you built?
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.




--
Wei, Lei
Department of Computer Science
University of North Carolina at Chapel Hill,
NC 27599-3175




-- 
Wei, Lei
Department of Computer Science
University of North Carolina at Chapel Hill,
NC 27599-3175
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: