Re: [tcpdump-workers] tcp sequence and ack number with libpcap

Its probably because tcpdump reports seq/ack numbers as relative from the start of that particular tcp stream and what you are getting from the structure are raw/absolute numbers. The other typical problem with reading the structure field is to read it using little-endian byte encoding instead

Re: [tcpdump-workers] Libpcap on mobile Android platform

Yes I can see from all the replies that it is possible, but nothing that can easily be deployed. Since jNetPcap already supports linux, it would be just a matter of recompiling the libjnetpcap.so against a target processor (may be cross compiled). Everything else shouldn't need any code changes. C

[tcpdump-workers] Libpcap on mobile Android platform

I found a port of libpcap to Android ( http://github.com/android/platform_external_libpcap). Android is linux underneath but java as the main application API. I am trying to figure out if my java wrapper http://jnetpcap.com

Re: [tcpdump-workers] New libpcap API

arris > Sent: Friday, January 15, 2010 5:33 PM > To: tcpdump-workers@lists.tcpdump.org > Subject: Re: [tcpdump-workers] New libpcap API > > > On Jan 15, 2010, at 8:17 AM, Mark Bednarczyk wrote: > > > I'm the developer of a java libpcap wrapper jNetPcap. jNetPcap A

[tcpdump-workers] New libpcap API

Hi, I'm the developer of a java libpcap wrapper jNetPcap. jNetPcap API currently provides comparible libpcap functions for almost everything prior to libpcap 0.9.8 version. I am planning out additional functions that I think need to be added to the API. Does anyone know which functions were intr

Re: [tcpdump-workers] Libpcap on VMWare

). We are using jnetpcap which is a > > wrapper over libpcap. Mark Bednarczyk posted the original > query (4256). > > > > -- > > > > We are experiencing massive packet drops in libpcap while > working with > > Non Windows

Re: [tcpdump-workers] Libpcap performance under VMWare guest OSes

performance under > VMWare guest OSes > > Mark Bednarczyk wrote: > > Hello, > > We are running into some performance issues with libpcap when > > running under VMWare products such as VMWworkstation or VMServer. > > These are guest OSes (running as a VM process on a

Re: [tcpdump-workers] Libpcap performance under VMWare guest OSes

ilto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of > Guy Harris > Sent: Thursday, December 10, 2009 9:41 PM > To: tcpdump-workers@lists.tcpdump.org > Subject: Re: [tcpdump-workers] Libpcap performance under > VMWare guest OSes > > > On Dec 10, 2009, at 6:33 PM, Mark

Re: [tcpdump-workers] Libpcap performance under VMWare guest OSes

o:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of > Guy Harris > Sent: Thursday, December 10, 2009 8:16 PM > To: tcpdump-workers@lists.tcpdump.org > Subject: Re: [tcpdump-workers] Libpcap performance under > VMWare guest OSes > > > On Dec 10, 2009, at 4:45 PM, Mar

Re: [tcpdump-workers] Libpcap performance under VMWare guest OSes

I hope you don't mind if I submit ttcp numbers instead of netperf. The following tests are between 3 physical machines on a 10-meg ethernet network all connected to the same subnet. System #1: win_32 and ubuntu1_32(dual CPU) System #2: fedora core 64-bit (quad CPU) System #3: debian_32

[tcpdump-workers] Libpcap performance under VMWare guest OSes

Hello, We are running into some performance issues with libpcap when running under VMWare products such as VMWworkstation or VMServer. These are guest OSes (running as a VM process on a host operating system.) We are finding that libpcap drops packets with only few hundred kilo-bits traffic ca

[tcpdump-workers] Pcap next-gen file format

I haven't kept up on the fact that there is a new file format in the works. I find it very interesting that my own efforts for a 'NAP' file format for my own project (http://jnetstream.sf.net) nearly mirror pcap design while I wasn't even aware that pcap team was working on a format as well. So thi

[tcpdump-workers] Add jNetPcap to "related projects"

Would it be possible to add my open source project jNetPcap to "releated projects" section on tcpdump.org website? Project website: http://jnetpcap.sf.net SourceForge: http://sourceforge.net/projects/jnetpcap jNetPcap is a java wrapper around entire libpcap API. I just made a the latest release

[tcpdump-workers] pcap_send_packet vs. pcap_inject functions

Can someone explain to me the difference between these two calls, pcap_sendpacket vs. pcap_inject, introducted in 0.8.3? /* * API compatible with WinPcap's "send a packet" routine - returns -1 * on error, 0 otherwise. * * XXX - what if we get a short write? */ int pcap_sendpacket(pcap_t