Увидели сообщение с непонятной ссылкой, спам, непристойность или оскорбление?Воспользуйтесь ссылкой «Сообщить модератору» рядом с сообщением!
0 Пользователей и 1 Гость просматривают эту тему.
6tirlis,ОТКРОЙ архив найти файл README и читай.
LIBPCAP 1.x.ywww.tcpdump.orgPlease send inquiries/comments/reports to: tcpdump-workers@lists.tcpdump.orgAnonymous Git is available via: git clone git://bpf.tcpdump.org/libpcapPlease submit patches by forking the branch on GitHub at http://github.com/the-tcpdump-group/libpcap/tree/masterand issuing a pull request.formerly from Lawrence Berkeley National Laboratory Network Research Group <libpcap@ee.lbl.gov> ftp://ftp.ee.lbl.gov/old/libpcap-0.4a7.tar.ZThis directory contains source code for libpcap, a system-independentinterface for user-level packet capture. libpcap provides a portableframework for low-level network monitoring. Applications includenetwork statistics collection, security monitoring, network debugging,etc. Since almost every system vendor provides a different interfacefor packet capture, and since we've developed several tools thatrequire this functionality, we've created this system-independent APIto ease in porting and to alleviate the need for severalsystem-dependent packet capture modules in each application.For some platforms there are README.{system} files that discuss issueswith the OS's interface for packet capture on those platforms, such ashow to enable support for that interface in the OS, if it's not built inby default.The libpcap interface supports a filtering mechanism based on thearchitecture in the BSD packet filter. BPF is described in the 1993Winter Usenix paper ``The BSD Packet Filter: A New Architecture forUser-level Packet Capture''. A compressed PostScript version can befound at ftp://ftp.ee.lbl.gov/papers/bpf-usenix93.ps.Zor http://www.tcpdump.org/papers/bpf-usenix93.ps.Zand a gzipped version can be found at http://www.tcpdump.org/papers/bpf-usenix93.ps.gzA PDF version can be found at http://www.tcpdump.org/papers/bpf-usenix93.pdfAlthough most packet capture interfaces support in-kernel filtering,libpcap utilizes in-kernel filtering only for the BPF interface.On systems that don't have BPF, all packets are read into user-spaceand the BPF filters are evaluated in the libpcap library, incurringadded overhead (especially, for selective filters). Ideally, libpcapwould translate BPF filters into a filter program that is compatiblewith the underlying kernel subsystem, but this is not yet implemented.BPF is standard in 4.4BSD, BSD/OS, NetBSD, FreeBSD, OpenBSD, DragonFlyBSD, and Mac OS X; an older, modified and undocumented version isstandard in AIX. {DEC OSF/1, Digital UNIX, Tru64 UNIX} uses thepacketfilter interface but has been extended to accept BPF filters(which libpcap utilizes). Also, you can add BPF filter support toUltrix using the kernel source and/or object patches available in: http://www.tcpdump.org/other/bpfext42.tar.ZLinux, in the 2.2 kernel and later kernels, has a "Socket Filter"mechanism that accepts BPF filters; see the README.linux file forinformation on configuring that option.Note to Linux distributions and *BSD systems that include libpcap:There's now a rule to make a shared library, which should work on Linux and *BSD, among other platforms.It sets the soname of the library to "libpcap.so.1"; this is what it should be, *NOT* libpcap.so.1.x or libpcap.so.1.x.y or something such as that.We've been maintaining binary compatibility between libpcap releases for quite a while; there's no reason to tie a binary linked with libpcap to a particular release of libpcap.Problems, bugs, questions, desirable enhancements, etc. should be sentto the address "tcpdump-workers@lists.tcpdump.org". Bugs, supportrequests, and feature requests may also be submitted on the GitHub issuetracker for libpcap at https://github.com/the-tcpdump-group/libpcap/issuesSource code contributions, etc. should be sent to the email addressabove or submitted by forking the branch on GitHub at http://github.com/the-tcpdump-group/libpcap/tree/masterand issuing a pull request.Current versions can be found at www.tcpdump.org. - The TCPdump team
6tirlis, покажите пожалуйста всё содержимое архива.
shtirlitz@6tirlitz-PC:~/Загрузки$ tar -tf libpcap-1.6.2.tar.gzlibpcap-1.6.2/libpcap-1.6.2/grammar.ylibpcap-1.6.2/pcap_setnonblock.3pcaplibpcap-1.6.2/fad-glifc.clibpcap-1.6.2/llc.hlibpcap-1.6.2/sunatmpos.hlibpcap-1.6.2/sf-pcap-ng.clibpcap-1.6.2/pcap-dbus.clibpcap-1.6.2/msdos/libpcap-1.6.2/msdos/pktdrvr.hlibpcap-1.6.2/msdos/pkt_rx0.asmlibpcap-1.6.2/msdos/common.djlibpcap-1.6.2/msdos/bin2c.clibpcap-1.6.2/msdos/pktdrvr.clibpcap-1.6.2/msdos/ndis2.clibpcap-1.6.2/msdos/pkt_rx1.slibpcap-1.6.2/msdos/ndis2.hlibpcap-1.6.2/msdos/makefile.wclibpcap-1.6.2/msdos/makefilelibpcap-1.6.2/msdos/makefile.djlibpcap-1.6.2/msdos/readme.doslibpcap-1.6.2/msdos/ndis_0.asmlibpcap-1.6.2/Makefile-devel-addslibpcap-1.6.2/pcap_list_tstamp_types.3pcap.inlibpcap-1.6.2/pcap_findalldevs.3pcaplibpcap-1.6.2/aclocal.m4libpcap-1.6.2/SUNOS4/libpcap-1.6.2/SUNOS4/nit_if.o.sun3libpcap-1.6.2/SUNOS4/nit_if.o.sun4c.4.0.3clibpcap-1.6.2/SUNOS4/nit_if.o.sparclibpcap-1.6.2/README.sitalibpcap-1.6.2/pcap-bt-linux.hlibpcap-1.6.2/pcap_dump_ftell.3pcaplibpcap-1.6.2/lbl/libpcap-1.6.2/lbl/os-aix4.hlibpcap-1.6.2/lbl/os-osf5.hlibpcap-1.6.2/lbl/os-hpux11.hlibpcap-1.6.2/lbl/os-solaris2.hlibpcap-1.6.2/lbl/os-sunos4.hlibpcap-1.6.2/lbl/os-osf4.hlibpcap-1.6.2/lbl/os-ultrix4.hlibpcap-1.6.2/pcap-nit.clibpcap-1.6.2/pcap_can_set_rfmon.3pcaplibpcap-1.6.2/README.tru64libpcap-1.6.2/CHANGESlibpcap-1.6.2/pcap-netfilter-linux.clibpcap-1.6.2/savefile.clibpcap-1.6.2/pcap-tstamp.manmisc.inlibpcap-1.6.2/README.hpuxlibpcap-1.6.2/pcap-linux.clibpcap-1.6.2/org.tcpdump.chmod_bpf.plistlibpcap-1.6.2/pcap-bpf.clibpcap-1.6.2/pcap_open_offline.3pcap.inlibpcap-1.6.2/pcap_list_datalinks.3pcap.inlibpcap-1.6.2/pcap-can-linux.clibpcap-1.6.2/pcap-snoop.clibpcap-1.6.2/pcap_major_version.3pcaplibpcap-1.6.2/pcap-filter.manmisc.inlibpcap-1.6.2/pcap_datalink_name_to_val.3pcaplibpcap-1.6.2/pcap_activate.3pcaplibpcap-1.6.2/pcap_set_tstamp_type.3pcap.inlibpcap-1.6.2/pcap-dbus.hlibpcap-1.6.2/pcap_fileno.3pcaplibpcap-1.6.2/pcap-snf.hlibpcap-1.6.2/pcap_set_rfmon.3pcaplibpcap-1.6.2/pcap_set_immediate_mode.3pcaplibpcap-1.6.2/pcap-can-linux.hlibpcap-1.6.2/pcap_open_dead.3pcap.inlibpcap-1.6.2/pcap-config.inlibpcap-1.6.2/pcap-libdlpi.clibpcap-1.6.2/pcap-win32.clibpcap-1.6.2/pcap_set_buffer_size.3pcaplibpcap-1.6.2/pcap_dump_open.3pcap.inlibpcap-1.6.2/READMElibpcap-1.6.2/pcap-septel.hlibpcap-1.6.2/pcap-bpf.hlibpcap-1.6.2/pcap_dump_close.3pcaplibpcap-1.6.2/pcap_lookupnet.3pcaplibpcap-1.6.2/pcap-sita.htmllibpcap-1.6.2/sf-pcap-ng.hlibpcap-1.6.2/pcap_lookupdev.3pcaplibpcap-1.6.2/pcap-canusb-linux.hlibpcap-1.6.2/Makefile.inlibpcap-1.6.2/README.macosxlibpcap-1.6.2/fad-win32.clibpcap-1.6.2/README.daglibpcap-1.6.2/pcap_tstamp_type_val_to_name.3pcaplibpcap-1.6.2/runlex.shlibpcap-1.6.2/pcap_dump_file.3pcaplibpcap-1.6.2/pcap_lib_version.3pcaplibpcap-1.6.2/pcap_tstamp_type_name_to_val.3pcaplibpcap-1.6.2/missing/libpcap-1.6.2/missing/snprintf.clibpcap-1.6.2/pcap_setdirection.3pcaplibpcap-1.6.2/pcap_inject.3pcaplibpcap-1.6.2/pcap-enet.clibpcap-1.6.2/tests/libpcap-1.6.2/tests/opentest.clibpcap-1.6.2/tests/selpolltest.clibpcap-1.6.2/tests/reactivatetest.clibpcap-1.6.2/tests/findalldevstest.clibpcap-1.6.2/tests/valgrindtest.clibpcap-1.6.2/tests/filtertest.clibpcap-1.6.2/tests/capturetest.clibpcap-1.6.2/pcap-config.1libpcap-1.6.2/nlpid.hlibpcap-1.6.2/pcap-bt-monitor-linux.hlibpcap-1.6.2/INSTALL.txtlibpcap-1.6.2/pcap-dag.hlibpcap-1.6.2/pcap_set_datalink.3pcaplibpcap-1.6.2/config.h.inlibpcap-1.6.2/pcap_stats.3pcaplibpcap-1.6.2/bpf_dump.clibpcap-1.6.2/bpf/libpcap-1.6.2/bpf/net/libpcap-1.6.2/bpf/net/bpf_filter.clibpcap-1.6.2/pcap.3pcap.inlibpcap-1.6.2/pcap_snapshot.3pcaplibpcap-1.6.2/pcap_geterr.3pcaplibpcap-1.6.2/pcap-savefile.manfile.inlibpcap-1.6.2/pcap_breakloop.3pcaplibpcap-1.6.2/scanner.llibpcap-1.6.2/pcap.hlibpcap-1.6.2/pcap_strerror.3pcaplibpcap-1.6.2/pcap_datalink.3pcap.inlibpcap-1.6.2/pcap_set_timeout.3pcaplibpcap-1.6.2/README.linuxlibpcap-1.6.2/pcap-namedb.hlibpcap-1.6.2/install-shlibpcap-1.6.2/pcap-bt-monitor-linux.clibpcap-1.6.2/TODOlibpcap-1.6.2/ChmodBPF/libpcap-1.6.2/ChmodBPF/ChmodBPFlibpcap-1.6.2/ChmodBPF/StartupParameters.plistlibpcap-1.6.2/README.septellibpcap-1.6.2/pcap-dos.clibpcap-1.6.2/VERSIONlibpcap-1.6.2/pcap-common.hlibpcap-1.6.2/pcap_compile.3pcap.inlibpcap-1.6.2/Win32/libpcap-1.6.2/Win32/Prj/libpcap-1.6.2/Win32/Prj/libpcap.dswlibpcap-1.6.2/Win32/Prj/libpcap.dsplibpcap-1.6.2/Win32/Src/libpcap-1.6.2/Win32/Src/getservent.clibpcap-1.6.2/Win32/Src/getaddrinfo.clibpcap-1.6.2/Win32/Src/getopt.clibpcap-1.6.2/Win32/Src/inet_net.clibpcap-1.6.2/Win32/Src/inet_pton.clibpcap-1.6.2/Win32/Src/getnetent.clibpcap-1.6.2/Win32/Src/getnetbynm.clibpcap-1.6.2/Win32/Src/gai_strerror.clibpcap-1.6.2/Win32/Src/inet_aton.clibpcap-1.6.2/Win32/Src/ffs.clibpcap-1.6.2/Win32/Include/libpcap-1.6.2/Win32/Include/ip6_misc.hlibpcap-1.6.2/Win32/Include/net/libpcap-1.6.2/Win32/Include/net/paths.hlibpcap-1.6.2/Win32/Include/net/if.hlibpcap-1.6.2/Win32/Include/net/netdb.hlibpcap-1.6.2/Win32/Include/sockstorage.hlibpcap-1.6.2/Win32/Include/inetprivate.hlibpcap-1.6.2/Win32/Include/cdecl_ext.hlibpcap-1.6.2/Win32/Include/Gnuc.hlibpcap-1.6.2/Win32/Include/arpa/libpcap-1.6.2/Win32/Include/arpa/nameser.hlibpcap-1.6.2/Win32/Include/addrinfo.hlibpcap-1.6.2/Win32/Include/bittypes.hlibpcap-1.6.2/pcap_is_swapped.3pcaplibpcap-1.6.2/pcap_loop.3pcaplibpcap-1.6.2/pcap-snf.clibpcap-1.6.2/gencode.clibpcap-1.6.2/inet.clibpcap-1.6.2/dlpisubs.clibpcap-1.6.2/pcap-null.clibpcap-1.6.2/pcap_freecode.3pcaplibpcap-1.6.2/ieee80211.hlibpcap-1.6.2/pcap_setfilter.3pcaplibpcap-1.6.2/pcap-usb-linux.clibpcap-1.6.2/config.guesslibpcap-1.6.2/LICENSElibpcap-1.6.2/pcap-dag.clibpcap-1.6.2/fad-null.clibpcap-1.6.2/pcap_open_live.3pcaplibpcap-1.6.2/pcap-int.hlibpcap-1.6.2/pcap/libpcap-1.6.2/pcap/namedb.hlibpcap-1.6.2/pcap/pcap.hlibpcap-1.6.2/pcap/vlan.hlibpcap-1.6.2/pcap/bluetooth.hlibpcap-1.6.2/pcap/usb.hlibpcap-1.6.2/pcap/nflog.hlibpcap-1.6.2/pcap/sll.hlibpcap-1.6.2/pcap/bpf.hlibpcap-1.6.2/pcap/ipnet.hlibpcap-1.6.2/fad-getad.clibpcap-1.6.2/pcap-linktype.manmisc.inlibpcap-1.6.2/pcap_set_snaplen.3pcaplibpcap-1.6.2/fad-sita.clibpcap-1.6.2/arcnet.hlibpcap-1.6.2/pcap-pf.clibpcap-1.6.2/pcap_create.3pcaplibpcap-1.6.2/pcap_statustostr.3pcaplibpcap-1.6.2/mkdeplibpcap-1.6.2/bpf_image.clibpcap-1.6.2/pcap-snit.clibpcap-1.6.2/atmuni31.hlibpcap-1.6.2/pcap-canusb-linux.clibpcap-1.6.2/pcap_get_selectable_fd.3pcaplibpcap-1.6.2/pcap-stdinc.hlibpcap-1.6.2/pcap-sita.hlibpcap-1.6.2/packaging/libpcap-1.6.2/packaging/pcap.spec.inlibpcap-1.6.2/ppp.hlibpcap-1.6.2/pcap.clibpcap-1.6.2/chmod_bpflibpcap-1.6.2/CREDITSlibpcap-1.6.2/dlpisubs.hlibpcap-1.6.2/README.aixlibpcap-1.6.2/sf-pcap.hlibpcap-1.6.2/pcap_next_ex.3pcaplibpcap-1.6.2/configure.inlibpcap-1.6.2/sf-pcap.clibpcap-1.6.2/optimize.clibpcap-1.6.2/pcap_set_tstamp_precision.3pcap.inlibpcap-1.6.2/pcap-dos.hlibpcap-1.6.2/pcap_file.3pcaplibpcap-1.6.2/pcap_dump_flush.3pcaplibpcap-1.6.2/README.Win32libpcap-1.6.2/etherent.clibpcap-1.6.2/pcap-usb-linux.hlibpcap-1.6.2/pcap_set_promisc.3pcaplibpcap-1.6.2/pcap-septel.clibpcap-1.6.2/pcap_dump.3pcaplibpcap-1.6.2/nametoaddr.clibpcap-1.6.2/ethertype.hlibpcap-1.6.2/pcap-sita.clibpcap-1.6.2/gencode.hlibpcap-1.6.2/config.sublibpcap-1.6.2/pcap_datalink_val_to_name.3pcaplibpcap-1.6.2/fad-gifc.clibpcap-1.6.2/pcap-dlpi.clibpcap-1.6.2/configurelibpcap-1.6.2/pcap_close.3pcaplibpcap-1.6.2/pcap_get_tstamp_precision.3pcap.inlibpcap-1.6.2/pcap-bt-linux.clibpcap-1.6.2/pcap-common.clibpcap-1.6.2/pcap_offline_filter.3pcaplibpcap-1.6.2/pcap-netfilter-linux.h
To build libpcap, run "./configure" (a shell script). The configurescript will determine your system attributes and generate anappropriate Makefile from Makefile.in. Next run "make". If everythinggoes well you can su to root and run "make install". However, you neednot install libpcap if you just want to build tcpdump; just make surethe tcpdump and libpcap directory trees have the same parentdirectory.If configure says: configure: warning: cannot determine packet capture interface configure: warning: (see INSTALL for more info)then your system either does not support packet capture or your systemdoes support packet capture but libpcap does not support thatparticular type. (If you have HP-UX, see below.) If your system uses apacket capture not supported by libpcap, please send us patches; don'tforget to include an autoconf fragment suitable for use inconfigure.in.It is possible to override the default packet capture type, althoughthe circumstance where this works are limited. For example if you haveinstalled bpf under SunOS 4 and wish to build a snit libpcap: ./configure --with-pcap=snitAnother example is to force a supported packet capture type in the casewhere the configure scripts fails to detect it.You will need an ANSI C compiler to build libpcap. The configure scriptwill abort if your compiler is not ANSI compliant. If this happens, usethe generally available GNU C compiler (GCC).If you use flex, you must use version 2.4.6 or higher. The configurescript automatically detects the version of flex and will not use itunless it is new enough. You can use "flex -V" to see what version youhave (unless it's really old). The current version of flex is availableat flex.sourceforge.net and often comes packaged by means of the OS.As of this writing, the current version is 2.5.37.If you use bison, you must use flex (and visa versa). The configurescript automatically falls back to lex and yacc if both flex and bisonare not found.Sometimes the stock C compiler does not interact well with flex andbison. The list of problems includes undefined references for alloca.You can get around this by installing gcc or manually disabling flexand bison with: ./configure --without-flex --without-bisonIf your system only has AT&T lex, this is okay unless your libpcapprogram uses other lex/yacc generated code. (Although it's possible tomap the yy* identifiers with a script, we use flex and bison so wedon't feel this is necessary.)Some systems support the Berkeley Packet Filter natively; for exampleout of the box OSF and BSD/OS have bpf. If your system does not supportbpf, you will need to pick up: ftp://ftp.ee.lbl.gov/bpf-*.tar.ZNote well: you MUST have kernel source for your operating system inorder to install bpf. An exception is SunOS 4; the bpf distributionincludes replacement kernel objects for some of the standard SunOS 4network device drivers. See the bpf INSTALL document for moreinformation.If you use Solaris, there is a bug with bufmod(7) that is fixed inSolaris 2.3.2 (aka SunOS 5.3.2). Setting a snapshot length with thebroken bufmod(7) results in data be truncated from the FRONT of thepacket instead of the end. The work around is to not set a snapshotlength but this results in performance problems since the entire packetis copied to user space. If you must run an older version of Solaris,there is a patch available from Sun; ask for bugid 1149065. Afterinstalling the patch, use "setenv BUFMOD_FIXED" to enable use ofbufmod(7). However, we recommend you run a more current release ofSolaris.If you use the SPARCompiler, you must be careful to not use the/usr/ucb/cc interface. If you do, you will get bogus warnings andperhaps errors. Either make sure your path has /opt/SUNWspro/binbefore /usr/ucb or else: setenv CC /opt/SUNWspro/bin/ccbefore running configure. (You might have to do a "make distclean"if you already ran configure once).Also note that "make depend" won't work; while all of the knownuniverse uses -M, the SPARCompiler uses -xM to generate makefiledependencies.If you are trying to do packet capture with a FORE ATM card, you may ormay not be able to. They usually only release their driver in objectcode so unless their driver supports packet capture, there's not muchlibpcap can do.If you get an error like: tcpdump: recv_ack: bind error 0x???when using DLPI, look for the DL_ERROR_ACK error return values, usuallyin /usr/include/sys/dlpi.h, and find the corresponding value.Under {DEC OSF/1, Digital UNIX, Tru64 UNIX}, packet capture must beenabled before it can be used. For instructions on how to enable packetfilter support, see: ftp://ftp.digital.com/pub/Digital/dec-faq/Digital-UNIXLook for the "How do I configure the Berkeley Packet Filter and capturetcpdump traces?" item.Once you enable packet filter support, your OSF system will support bpfnatively.Under Ultrix, packet capture must be enabled before it can be used. Forinstructions on how to enable packet filter support, see: ftp://ftp.digital.com/pub/Digital/dec-faq/ultrixIf you use HP-UX, you must have at least version 9 and either theversion of cc that supports ANSI C (cc -Aa) or else use the GNU Ccompiler. You must also buy the optional streams package. If you don'thave: /usr/include/sys/dlpi.h /usr/include/sys/dlpi_ext.hthen you don't have the streams package. In addition, we believe youneed to install the "9.X LAN and DLPI drivers cumulative" patch(PHNE_6855) to make the version 9 DLPI work with libpcap.The DLPI streams package is standard starting with HP-UX 10.The HP implementation of DLPI is a little bit eccentric. UnlikeSolaris, you must attach /dev/dlpi instead of the specific /dev/*network pseudo device entry in order to capture packets. The PPA isbased on the ifnet "index" number. Under HP-UX 9, it is necessary toread /dev/kmem and the kernel symbol file (/hp-ux). Under HP-UX 10,DLPI can provide information for determining the PPA. It does not seemto be possible to trace the loopback interface. Unlike other DLPIimplementations, PHYS implies MULTI and SAP and you get an error if youtry to enable more than one promiscuous mode at a time.It is impossible to capture outbound packets on HP-UX 9. To do so onHP-UX 10, you will, apparently, need a late "LAN products cumulativepatch" (at one point, it was claimed that this would be PHNE_18173 fors700/10.20; at another point, it was claimed that the required patcheswere PHNE_20892, PHNE_20725 and PHCO_10947, or newer patches), and to doso on HP-UX 11 you will, apparently, need the latest lancommon/DLPIpatches and the latest driver patch for the interface(s) in use on HP-UX11 (at one point, it was claimed that patches PHNE_19766, PHNE_19826,PHNE_20008, and PHNE_20735 did the trick).Furthermore, on HP-UX 10, you will need to turn on a kernel switch bydoing echo 'lanc_outbound_promisc_flag/W 1' | adb -w /stand/vmunix /dev/memYou would have to arrange that this happen on reboots; the right way todo that would probably be to put it into an executable script file"/sbin/init.d/outbound_promisc" and making"/sbin/rc2.d/S350outbound_promisc" a symbolic link to that script.Finally, testing shows that there can't be more than one simultaneousDLPI user per network interface.If you use Linux, this version of libpcap is known to compile and rununder Red Hat 4.0 with the 2.0.25 kernel. It may work with earlier 2.Xversions but is guaranteed not to work with 1.X kernels. Running morethan one libpcap program at a time, on a system with a 2.0.X kernel, cancause problems since promiscuous mode is implemented by twiddling theinterface flags from the libpcap application; the packet capturemechanism in the 2.2 and later kernels doesn't have this problem. Also,packet timestamps aren't very good. This appears to be due to haphazardhandling of the timestamp in the kernel.Note well: there is rumoured to be a version of tcpdump floating aroundcalled 3.0.3 that includes libpcap and is supposed to support Linux. You should be advised that neither the Network Research Group at LBNLnor the Tcpdump Group ever generated a release with this version number. The LBNL Network Research Group notes with interest that a standardcracker trick to get people to install trojans is to distribute boguspackages that have a version number higher than the current release. They also noted with annoyance that 90% of the Linux related bug reportsthey got are due to changes made to unofficial versions of their page. If you are having trouble but aren't using a version that came fromtcpdump.org, please try that before submitting a bug report!On Linux, libpcap will not work if the kernel does not have the packetsocket option enabled; see the README.linux file for information aboutthis.If you use AIX, you may not be able to build libpcap from this release.We do not have an AIX system in house so it's impossible for us to testAIX patches submitted to us. We are told that you must link against/lib/pse.exp, that you must use AIX cc or a GNU C compiler newer than2.7.2, and that you may need to run strload before running a libpcapapplication.Read the README.aix file for information on installing libpcap andconfiguring your system to be able to support libpcap.If you use NeXTSTEP, you will not be able to build libpcap from thisrelease.If you use SINIX, you should be able to build libpcap from thisrelease. It is known to compile and run on SINIX-Y/N 5.42 with the C-DSV1.0 or V1.1 compiler. But note that in some releases of SINIX, yaccemits incorrect code; if grammar.y fails to compile, change everyoccurence of: #ifdef YYDEBUGto: #if YYDEBUGAnother workaround is to use flex and bison.If you use SCO, you might have trouble building libpcap from thisrelease. We do not have a machine running SCO and have not had reportsof anyone successfully building on it; the current release of libpcapdoes not compile on SCO OpenServer 5. Although SCO apparently supportsDLPI to some extent, the DLPI in OpenServer 5 is very non-standard, andit appears that completely new code would need to be written to capturenetwork traffic. SCO do not appear to provide tcpdump binaries forOpenServer 5 or OpenServer 6 as part of SCO Skunkware: http://www.sco.com/skunkware/If you use UnixWare, you might be able to build libpcap from thisrelease, or you might not. We do not have a machine running UnixWare,so we have not tested it; however, SCO provide packages for libpcap0.6.2 and tcpdump 3.7.1 in the UnixWare 7/Open UNIX 8 part of SCOSkunkware, and the source package for libpcap 0.6.2 is not changed fromthe libpcap 0.6.2 source release, so this release of libpcap might alsobuild without changes on UnixWare 7.If linking tcpdump fails with "Undefined: _alloca" when using bison ona Sun4, your version of bison is broken. In any case version 1.16 orhigher is recommended (1.14 is known to cause problems 1.16 is known towork). Either pick up a current version from: ftp://ftp.gnu.org/pub/gnu/bisonor hack around it by inserting the lines: #ifdef __GNUC__ #define alloca __builtin_alloca #else #ifdef sparc #include <alloca.h> #else char *alloca (); #endif #endifright after the (100 line!) GNU license comment in bison.simple, removegrammar.[co] and fire up make again.If you use SunOS 4, your kernel must support streams NIT. If you run alibpcap program and it dies with: /dev/nit: No such deviceYou must add streams NIT support to your kernel configuration, runconfig and boot the new kernel.If you are running a version of SunOS earlier than 4.1, you will needto replace the Sun supplied /sys/sun{3,4,4c}/OBJ/nit_if.o with theappropriate version from this distribution's SUNOS4 subdirectory andbuild a new kernel: nit_if.o.sun3-sunos4 (any flavor of sun3) nit_if.o.sun4c-sunos4.0.3c (SS1, SS1+, IPC, SLC, etc.) nit_if.o.sun4-sunos4 (Sun4's not covered by nit_if.o.sun4c-sunos4.0.3c)These nit replacements fix a bug that makes nit essentially unusable inpre-SunOS 4.1. In addition, our sun4c-sunos4.0.3c nit gives youtimestamps to the resolution of the SS-1 clock (1 us) rather than thelousy 20ms timestamps Sun gives you (tcpdump will print out the fulltimestamp resolution if it finds it's running on a SS-1).FILES-----CHANGES - description of differences between releasesChmodBPF/* - Mac OS X startup item to set ownership and permissions on /dev/bpf*CREDITS - people that have helped libpcap alongINSTALL.txt - this fileLICENSE - the license under which tcpdump is distributedMakefile.in - compilation rules (input to the configure script)README - description of distributionREADME.aix - notes on using libpcap on AIXREADME.dag - notes on using libpcap to capture on Endace DAG devicesREADME.hpux - notes on using libpcap on HP-UXREADME.linux - notes on using libpcap on LinuxREADME.macosx - notes on using libpcap on Mac OS XREADME.septel - notes on using libpcap to capture on Intel/Septel devicesREADME.sita - notes on using libpcap to capture on SITA devicesREADME.tru64 - notes on using libpcap on Digital/Tru64 UNIXREADME.Win32 - notes on using libpcap on Win32 systems (with WinPcap)SUNOS4 - pre-SunOS 4.1 replacement kernel nit modulesVERSION - version of this releaseacconfig.h - support for post-2.13 autoconfaclocal.m4 - autoconf macrosarcnet.h - ARCNET definitionsatmuni31.h - ATM Q.2931 definitionsbpf/net - copy of bpf_filter.cbpf_dump.c - BPF program printing routinesbpf_filter.c - symlink to bpf/net/bpf_filter.cbpf_image.c - BPF disassembly routineconfig.guess - autoconf supportconfig.h.in - autoconf inputconfig.sub - autoconf supportconfigure - configure script (run this first)configure.in - configure script sourcedlpisubs.c - DLPI-related functions for pcap-dlpi.c and pcap-libdlpi.cdlpisubs.h - DLPI-related function declarationsetherent.c - /etc/ethers support routinesethertype.h - Ethernet protocol types and names definitionsfad-getad.c - pcap_findalldevs() for systems with getifaddrs()fad-gifc.c - pcap_findalldevs() for systems with only SIOCGIFLISTfad-glifc.c - pcap_findalldevs() for systems with SIOCGLIFCONFfad-null.c - pcap_findalldevs() for systems without capture supportfad-sita.c - pcap_findalldevs() for systems with SITA supportfad-win32.c - pcap_findalldevs() for WinPcapfiltertest.c - test program for BPF compilerfindalldevstest.c - test program for pcap_findalldevs()gencode.c - BPF code generation routinesgencode.h - BPF code generation definitionsgrammar.y - filter string grammarieee80211.h - 802.11 definitionsinet.c - network routinesinstall-sh - BSD style install scriptlbl/os-*.h - OS-dependent defines and prototypesllc.h - 802.2 LLC SAP definitionsmissing/* - replacements for missing library functionsmkdep - construct Makefile dependency listmsdos/* - drivers for MS-DOS capture supportnametoaddr.c - hostname to address routinesnlpid.h - OSI network layer protocol identifier definitionsnet - symlink to bpf/netoptimize.c - BPF optimization routinespackaging - packaging information for building libpcap RPMspcap/bluetooth.h - public definition of DLT_BLUETOOTH_HCI_H4_WITH_PHDR headerpcap/bpf.h - BPF definitionspcap/namedb.h - public libpcap name database definitionspcap/pcap.h - public libpcap definitionspcap/sll.h - public definition of DLT_LINUX_SLL headerpcap/usb.h - public definition of DLT_USB headerpcap-bpf.c - BSD Packet Filter supportpcap-bpf.h - header for backwards compatibilitypcap-bt-linux.c - Bluetooth capture support for Linuxpcap-bt-linux.h - Bluetooth capture support for Linuxpcap-dag.c - Endace DAG device capture supportpcap-dag.h - Endace DAG device capture supportpcap-dlpi.c - Data Link Provider Interface supportpcap-dos.c - MS-DOS capture supportpcap-dos.h - headers for MS-DOS capture supportpcap-enet.c - enet supportpcap-int.h - internal libpcap definitionspcap-libdlpi.c - Data Link Provider Interface support for systems with libdlpipcap-linux.c - Linux packet socket supportpcap-namedb.h - header for backwards compatibilitypcap-nit.c - SunOS Network Interface Tap supportpcap-nit.h - SunOS Network Interface Tap definitionspcap-null.c - dummy monitor support (allows offline use of libpcap)pcap-pf.c - Ultrix and Digital/Tru64 UNIX Packet Filter supportpcap-pf.h - Ultrix and Digital/Tru64 UNIX Packet Filter definitionspcap-septel.c - Intel/Septel device capture supportpcap-septel.h - Intel/Septel device capture supportpcap-sita.c - SITA device capture supportpcap-sita.h - SITA device capture supportpcap-sita.html - SITA device capture documentationpcap-stdinc.h - includes and #defines for compiling on Win32 systemspcap-snit.c - SunOS 4.x STREAMS-based Network Interface Tap supportpcap-snoop.c - IRIX Snoop network monitoring supportpcap-usb-linux.c - USB capture support for Linuxpcap-usb-linux.h - USB capture support for Linuxpcap-win32.c - WinPcap capture supportpcap.3pcap - manual entry for the librarypcap.c - pcap utility routinespcap.h - header for backwards compatibilitypcap_*.3pcap - manual entries for library functionspcap-filter.4 - manual entry for filter syntaxpcap-linktype.4 - manual entry for link-layer header typesppp.h - Point to Point Protocol definitionsrunlex.sh - wrapper for Lex/Flexsavefile.c - offline supportscanner.l - filter string scannersunatmpos.h - definitions for SunATM capturingWin32 - headers and routines for building on Win32 systems
6tirlis, что-то непонятно? Качаете архив в хомяк, открываете, переходите в распакованную директорию и дальше по сценарию - ./configure >>> make >>> sudo make install.
Перед make можно патч применить
Страница сгенерирована за 0.071 секунд. Запросов: 23.