tcpdump mailing list archives

Re: Remote capture support in libpcap


From: Fulvio Risso <fulvio.risso () polito it>
Date: Tue, 02 Dec 2008 11:24:35 +0100

Hi Stig.
Wehen I developed the remote part, in 2002, everthying compiled also on Linux and BSD. WinPcap included also a makefile running on these system; it was enough to unpack WinPcap on Unix, type "configure" and bla bla and everything worked.
However, it's long time that I don't check the status of the remote portion.
However, be careful because there's a conceptual bug in the remote protocol that allows only ONE request each time. In other words, you must send a command and wait for the related response before sending another command. In Windows (with Analyzer) I had some trouble in that respect, but for different reasons (first of all, we have to change the protocol, which is a pain for the necessity of supporting older implementations) I haven't had the time to do this. I re-defined the protocol in order to cope with this problem, but I never re-implemented it.

Cheers,

        fulvio

On 01/12/2008 23.22, Stig Bjørlykke wrote:
Hi.

Is it possible to get the remote capture capability ported from
winpcap back to libpcap?  I find this feature very easy to use in my
development environment, and would really like to have this support in
the official libpcap.

I know I can use the code from winpcap and make my own version of
libpcap (which I do right now), but this is no long term solution.  I
also know I can tunnel the data through ssh, but this is not as easy
to use.

I'm primary working with Wireshark.



-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: