lkml.org 
[lkml]   [1999]   [Nov]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: SOCK_PACKET still obsolete in 2.x with x >= 2?
From
Date
torsten@debian.org (Torsten Landschoff) writes:

> Hi *,
>
> I am the new maintainer of the tcpdump package for Debian and in the
> progress of going through the bug reports. One of them is
>
> #21356: tcpdump: on 2.1.96, tcpdump uses obsolete (AF_INET,SOCK_PACKET)
>
> > I get these message "tcpdump uses obsolete (AF_INET,SOCK_PACKET)" from
> > my 2.1.96 kernel when starting tcpdump. It still works fine, so
> > I'm classing this as a "wishlist" bug.
>
> I remember seeing these messages as well but they disappeared with 2.2.x
> Is SOCK_PACKET still considered obsolete?

I don't think they disappeared.

Yes, it is still obsolete. See packet (7). SOCK_PACKET is evil because
it requires libpcap to know about every possible link layer, with
(PF_PACKET,SOCK_DGRAM) the kernel handles this abstraction. Alexey
Kuznetsov's libpcap/tcpdump patches (ftp.inr.ac.ru:/ip-routing/lbl-tools)
fix it.

They are e.g. used in the newest version of the SuSE tcpdump.

In the long run applying them (modulo the small nits like reversing the
meaning of -p) will b ea good idea, because it'll save you a
lot of work as tcpdump maintainer.

-Andi

--
This is like TV. I don't like TV.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:55    [W:0.185 / U:0.016 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site