Re: tcpdump patches...

["Gianluca Varenni" <gianluca.varenni () cacetech com>]

----- Original Message ----- 
From: "Michael Richardson" <mcr () sandelman ottawa on ca>
To: <tcpdump-workers () lists tcpdump org>
Cc: "Peter Losher" <Peter_Losher () isc org>; "Joao Damas" <Joao_Damas () isc org>
Sent: Sunday, December 09, 2007 2:53 PM
Subject: Re: [tcpdump-workers] tcpdump patches...


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> > > > > > "Peter" == Peter Losher <Peter_Losher () isc org> writes:
>    Peter> Sorry it took so long to get back to you on this, but here is
>    Peter> the patch we are using for rotating tcpdump files for F-Root.
>    Peter> It works against tcpdump 3.8.3.  We (ISC) would *REALLY* like
>    Peter> to see this functionality in 3.9.x so we have to no longer
>    Peter> have to maintain a private branch.
>
>  I can't promise to put it in 3.9.x, but we've been trying to get a
> 4.01 release out soonish.

Uhm, 4.01? There's no 4.0 as far as I can see on the website. Actually Ken 
was talking about a 4.0/1.0 prerelease some weeks ago, but nothing 
happened...

Have a nice day
GV



>  Peter's patches are used by ISC and many of the root zone operators to
> collect statistics on root zone requests.
>
>  They have added two flags:
>       int Pflag=0;      /* rotate through ring files every -P minutes */
>       int Zflag=-1;     /* Minutes past the hour at which to force closure 
> */
>
>  (note: we'll likely not want to call it "ring files", as that might be
>  confusing with when pcap uses a memory mapped ring buffer interface.
>  Is there another term we could use?  Maybe something from another
>  language which means the same thing)
>
>  I'm posting because we are pretty much out of flags.
>  I want to do two things in the 4.xx release:
>
>  a) get rid of all old/compatibility flags that we have around.
>  b) provide a second "driver" program called "netdissect" which would
>     use primarily long options.
>
>  In the meantime, I want to verify that -P and -Z aren't going to
> horribly clash with some unpublished (i.e. "distro") patches.
>
> - -- 
> ]            Bear: "Me, I'm just the shape of a bear."          | 
> firewalls  [
> ]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net 
> architect[
> ] mcr () xelerance com      http://www.sandelman.ottawa.on.ca/mcr/ |device 
> driver[
> ] panic("Just another Debian GNU/Linux using, kernel hacking, security 
> guy"); [
>
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Finger me for keys
>
> iQEVAwUBR1xx5ICLcPvd0N1lAQIn+wf/eoKtjw3vs8PRjp8kDLs8OoROyIHr0ON1
> F/Ifq163AByjAaesmVlP5p6CLmy168av7Up0nKKR7vGkkEw3Uswyj8wqLTk4d6/G
> G0sUy0GcAY5ysxaeVezXvyYIqlowiJJTmFdV5LfrYfpHgnHQZm37UE9goeVuk+Mm
> 7xcCj4zQOdy8xdn/BmZDSmc8wndkYE9HcJ4La8vuhp3gOnqhGU1I3vviNgigSg8k
> uS2xLekYSIw1+RPo0DaQMMSvtdP8E6qCtIKw668Fnj1fmp3d7MzSgJuHv3tkyiSb
> u8b44fVUKHQazQd4XO7qeKyXylu+0TN3rNsEWVEb+sGq4WCH+0DDsg==
> =ph1F
> -----END PGP SIGNATURE-----
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe. 

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.