Messages in this thread | | | Subject | Re: SOCK_PACKET still obsolete in 2.x with x >= 2? | From | Andi Kleen <> | Date | 22 Nov 1999 10:34:49 +0100 |
| |
torsten@debian.org (Torsten Landschoff) writes:
> Hi *, > > I am the new maintainer of the tcpdump package for Debian and in the > progress of going through the bug reports. One of them is > > #21356: tcpdump: on 2.1.96, tcpdump uses obsolete (AF_INET,SOCK_PACKET) > > > I get these message "tcpdump uses obsolete (AF_INET,SOCK_PACKET)" from > > my 2.1.96 kernel when starting tcpdump. It still works fine, so > > I'm classing this as a "wishlist" bug. > > I remember seeing these messages as well but they disappeared with 2.2.x > Is SOCK_PACKET still considered obsolete?
I don't think they disappeared.
Yes, it is still obsolete. See packet (7). SOCK_PACKET is evil because it requires libpcap to know about every possible link layer, with (PF_PACKET,SOCK_DGRAM) the kernel handles this abstraction. Alexey Kuznetsov's libpcap/tcpdump patches (ftp.inr.ac.ru:/ip-routing/lbl-tools) fix it.
They are e.g. used in the newest version of the SuSE tcpdump.
In the long run applying them (modulo the small nits like reversing the meaning of -p) will b ea good idea, because it'll save you a lot of work as tcpdump maintainer.
-Andi
-- This is like TV. I don't like TV.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |