Re: tcpdump problem with DAG card

[Guy Harris <guy () alum mit edu>]

On Jan 9, 2008, at 3:37 PM, lei wei wrote:

> I'm actually trying to get Argus working with DAG but argus still  
> can't read
> anything from it. Do you have any experience on it?

No, I don't.

From a quick look at the source to Argus 2.0.6, it appears to be  
assuming that you can do a select() on the result of pcap_fileno(),  
which, as far as I know, is *NOT* the case for DAG devices; I don't  
think the DAG driver supports select() or poll().  That might cause it  
(and other applications using select() or poll() on pcap streams)  
never to see any incoming packets, or to fail in other ways.

Newer versions of libpcap (including 0.9.x) have  
pcap_get_selectable_fd(), which returns a file descriptor on which you  
can do select(), if such a descriptor exists, or -1, if no such file  
descriptor exists.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.