Bill Fenner

Results 18 issues of Bill Fenner

The eventfd is used to break out of a poll() before it times out, used by pcap_breakloop(). If we are non-blocking, then the eventfd is never needed, so we close...

linux

#861 talks about output, but input is also important. I would much rather say "to look at skb_type you use `ether[type]=3`" instead of "`ether[-4092]=3`" and have to figure out if...

improvement
BPF related
needs-patch

I've been updating my internal version of libpcap regularly. After updating this weekend, one of my tests completely hangs, and is unresponsive to SIGINT. This is just a preliminary report,...

TPACKET_V3
linux
pcap-input-output

Add support for the Hard Reset notifications and the corresponding N flag in Graceful Restart capability advertisement, per RFC8538. Add the BFD cease notification subcode assigned by IANA. This value...

Build with --coverage and use the coveralls tool to submit code coverage reports to https://coveralls.io/github/the-tcpdump-group/tcpdump Support for coverage builds is added to both automake and cmake, but coverage relies on...

reviewed_needswork

https://github.com/the-tcpdump-group/tcpdump/blob/dcf83034e06a18b69fe407ceac69715bf1abc2f6/print-bgp.c#L2770 `withdrawn_routes_len` is decremented while parsing the withdrawn routes, so if the withdrawn section is present but well-formed, `withdrawn_routes_len` will be zero.

bug

This builds on the work done by @catenacyber in #700. I started an independent effort to add oss-fuzz support, then discovered #700, and this is the combination of both efforts....

improvement
fuzz-testing

When I added a second site to my installation, the "Uplink Uptime" panel in the "UniFi-Poller: Network Sites - Prometheus" dashboard started complaining that it needed a query that returned...

enhancement
dashboards

When creating a simple filter for ICMP type 42, starting at the IPv4 layer: `filtertest IPv4 'icmp[icmptype] = 42'` we end up with a dangling instruction at the start: ```...

BPF related
optimizer

Similar to #1115 for ICMP, this adds handling of ICMPv6 Extended Echo. This spec (RFC8335) appears to be the first time where ICMP and ICMPv6 can reuse a non-trivial amount...