tcpdump mailing list archives

Re: v4/v6 packet length printing inconsistency


From: Gert Doering <gert () greenie muc de>
Date: Mon, 30 Jun 2025 23:28:32 +0200

Hi,

On Mon, Jun 30, 2025 at 08:43:29AM -0700, Guy Harris wrote:
To quote a comment I added to that issue:

Personally, I'd prefer a single line of output for easy parsing.


At one point, so did Apple, so they added a `-g` ("g" for "greppable") flag to remove that newline.

For some unknown reason, Apple's change to print-ip.c wasn't preserved as they upgraded to newer versions of 
tcpdump.org tcpdump, so that flag is now a no-op, even though it's documented.

Perhaps we should implement that flag.
...and, if we do, and we split the lines in verbose mode for IPv6, the 
-g/--ip-oneline flag would apply both to IPv4 and IPv6.

... that was fast...

commit b80f9649d8ff44b4ac69b2ab17b136ab44b92b0e (HEAD -> master, origin/master, origin/HEAD)
Author: Guy Harris <gharris () sonic net>
Date:   Mon Jun 30 09:43:54 2025 -0700

    Add the -g option, causing IPv4 output in verbose mode to be on one line.

... I was having a look at print-ip.c to see how "-v" is passed down,
stumbled over "ndo_gflag" and was very confused to see functioning "-g"
code in there... and then I looked at git log ;-)

So - will take that into account for print-ip6.c

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             gert () greenie muc de
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s


Current thread: