tcpdump mailing list archives

Re: rpcap support on non-windows


From: Guy Harris <guy () alum mit edu>
Date: Tue, 7 Mar 2017 15:15:38 -0800

On Mar 2, 2017, at 11:04 AM, Joerg Mayer <jmayer () loplof de> wrote:

Now it fails (i.e. it no longer crashes!) with:
jmayer@newegg:~/worktmp/libpcap/build(master)$ dumpcap -i rpcap://10.122.4.11/wifi0
Capturing on 'rpcap://10.122.4.11/wifi0'
dumpcap: Invalid capture filter "(null)" for interface 'rpcap://10.122.4.11/wifi0'.

That string isn't a valid capture filter (not-yet-activated pcap_t passed to pcap_compile).
See the User's Guide for a description of the capture filter syntax.

jmayer@newegg:~/worktmp/libpcap/build(master)$ dumpcap -i rpcap://10.122.4.11/wifi0 -L
Data link types of interface rpcap://10.122.4.11/wifi0 (use option -y to set):
 DLT -3 (not supported)

Both of which seem to be libpcap problems (or symptoms of the same problem).

Fixed in libpcap commit bf5cecc64b15489fd979aef7132e54ea5d2fd04b.
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Current thread: