I am trying to install libpcap and tcpdump, but even if I have already installed Flex, as the terminal tells me to do. What else could I do?
Code:
configure: error: Your operating system's lex is insufficient to compile libpcap. Flex is a lex replacement that has many advantages, including being able to compile libpcap. For more information, see [URL].
I am running slackware-current and I have tcpdump-4.1.1-i486-1.txz installed. If I remember right libpcap used to be part of tcpdump, but since recently i cannot find it in my system anymore! Tools like nmap give me the error message:
"error while loading shared libraries: libpcap.so.1: cannot open shared object file: No such file or directory"
I am trying to install Libpcap version 1.0.0 on Fedora 9. During 'make, i get the following error:
"/usr/bin/install: cannot stat `libpcap.so.1.0.0': No such file or directory
make: *** [install] Error 1"
I'm running Ubuntu 10.04.1 and am trying to get packet capturing working for my Bluetooth dongle using hcidump.From what I've read, libpcap must be compiled to enable Bluetooth sniffing and given that hcidump isn't finding a single packet, I'm guessing the version Ubuntu has installed for me isn't compiled with bluetooth support.So I downloaded a newer version of libpcap and installed the bluez header files. Configured libpcap and it gave a "Yes" for bluetooth support. It is now installed and sitting in /usr/local/lib/. Now I'm trying to compile hcidump to use this lib rather than the system default but I can't figure out how...I've read that GCC can be passed the -lpcap flag to set the path but I haven't figured out how to do this.
View 1 Replies View Relatedi've been trying to "./configure" the bandwitdhd package. When i do it i get :
configure: error: Bandwidthd requires but cannot find libpcap
I have installed the libpcap and libpcap-devel:
linux-1a6o:/home/alex/bandwidthd-2.0.1 # locate libpcap
/alex/Win32/Prj/libpcap.dsp
/alex/Win32/Prj/libpcap.dsw
/usr/lib/libpcap.a
[Code]....
I have configured NFS Server on CentOS 5.2 with an IBM Web Server(AIX). The IBM Web Server can upload all data onto NFS Server. Now, today i was having slow response on IBM Web Server & by measuring the NFS, I found below error while running "tcpdump" command. I have ran "tcpdump" command on NFS Server.
tcpdump -n -i eth1 | grep 2049
18:36:37.237451 IP 10.100.19.241.2049 > 10.100.19.88.1758143293: reply ok 1448 read [|nfs]
18:36:37.237476 IP 10.100.19.241.2049 > 10.100.19.88.539981409: reply ERR 1448
18:36:37.237481 IP 10.100.19.241.2049 > 10.100.19.88.796287348: reply ERR 1448
18:36:37.237488 IP 10.100.19.241.2049 > 10.100.19.88.1986098295: reply ERR 1448
18:36:37.237566 IP 10.100.19.241.2049 > 10.100.19.88.539762736: reply ERR 1448 .....
18:36:37.238263 IP 10.100.19.241.2049 > 10.100.19.88.1869440302: reply ERR 1448
16133 packets captured
23339 packets received by filter
7100 packets dropped by kernel
10.100.18.241 is the IP of NFS Server & 10.100.19.88 IP belongs to IBM Web Server.
I have configured NFS Server on CentOS 5.2 with IBM Web Server,which is having AIX 5.3 The IBM Web Server can upload all data onto NFS Server. Now, Today i was having slow response on IBM Web Server & by measuring the NFS, i found below error while running "tcpdump" command on CentOS Server.
tcpdump -n -i eth1 | grep 2049
18:36:37.237451 IP 10.100.19.241.2049 > 10.100.19.88.1758143293: reply ok 1448 read [|nfs]
18:36:37.237476 IP 10.100.19.241.2049 > 10.100.19.88.539981409: reply ERR 1448
18:36:37.237481 IP 10.100.19.241.2049 > 10.100.19.88.796287348: reply ERR 1448
[code]....
I have changed Network Card in CentOS. All LAN is on Gigabit Network. Also I have changed the Network Cable(Patch Cord). But,still no response.
I'm using Fedora9. I cannot start wireshark or tcpdump because of the lib dependency error:
Code:
[root@localhost ~]# wireshark
wireshark: error while loading shared libraries: libpcap.so.0.9: cannot open shared object file: No such file or directory
I updated libpcap before and the latest version is libpcap.so.1.1. I changed the version because of another application but I cannot remember when I did it, perhaps on Sep.11?
Code:
[root@localhost lib]# ll |grep libpcap
-rw-r--r-- 1 root root 309670 2010-09-11 08:10 libpcap.a
lrwxrwxrwx 1 root root 12 2010-09-11 08:10 libpcap.so -> libpcap.so.1
lrwxrwxrwx 1 root root 14 2010-09-11 08:10 libpcap.so.1 -> libpcap.so.1.1
-rwxr-xr-x 1 root root 243207 2010-09-11 08:10 libpcap.so.1.1
So I tried
Code:
ln -s libpcap.so.1.1 libpcap.so.0.9
but it doesn't work.
I use libpcap to write a program to detect network device in Ubuntu but not sucess. The result is no suitable device found. How many reasons are there for that? The code i used is the main user page.
[code]
#define HAVE_REMOTE
#define WPCAP
#include <pcap.h>
#include <stdlib.h>
#include <sys/socket.h>
[Code]....
These days i try make a simple sniffer for a embedded system. and it need the function of dump all the packets into a file, which can be read by wireshark..etc. First i copy a code called simplesniffer.c from the Internet,and and now I want to add the dumpfile funtion to it. i find some problems.Quote:
/* Come from ---- http://blog.chinaunix.net/u/24474/showart_226419.html */
/* simplesniffer.c */
#include <stdio.h>
[code]...
I am running Ubuntu Hardy Heron. Trying to configure a ax25 packet software to connect to the internet by way of a port called tun0 that I've created within the software. I can connect within the LAN but not outside. If I execute tcpdump while the tun0 is up, I first receive the message, "WARNING: arptype 65534 not supported by libpcap - falling back to cooked socket."Question: Does this warning relate to my connectivity issue and if so, how can I 'fix' the problem?
View 1 Replies View Relatedwe want to enhance the current libpcap version 1.1.x to provide timestamp in nanosecond resolution.
While searching related to same, we found that enhanced libpcap requires x64 architecture.
Is that so?
Do we need 64-bit architecture for using enhanced libpcap for nanosecond timestamping ?
I am trying to install libpcap version 1 on my centos 5.5 (which supply libpcap 0.9.4 as built in). I need libpcap>=1.0 to install snort 2.9. I tried to install by downloading source code from tcpdump.org but failed to update libpcap-0.9.4 by libpcap-1.0.0.
View 4 Replies View RelatedHow can I send and receive packets using libpcap, reply as early as possible.
View 1 Replies View RelatedIf I have a hard-disk with Ubuntu fully installed on it and I want to - all of a sudden - use Windows XP, is it mandatory that I firstly format the hard-disk first? So far, I have used two versions of Windows XP; one of them is from a few years before the other. Both copies of Windows XP when in start-up from booting from CD are causing errors. One of them is a BSOD error (0x0000007B) and the next Windows CD is stopping and giving me an error with setupdd.sys (error code 4). Is it required that the hard-disk is formatted before you even put a Windows boot CD in?
View 2 Replies View RelatedFor compiling ArpON on my server the cmake command says 'libpcap not found' when a newer version libpcap-1.0.0-5.20091201git117cb5.fc13.i686.rpm is already exiting which I am unable to erase as other rpms depend on it.
View 5 Replies View RelatedI was trying to installed skype and i am getting a error that reads: Error: Wrong architecture 'i386' has any one installed skype before?
View 3 Replies View RelatedI was wondering how one could set up tcpdump to run in the background, dumping all output to a file until I terminate the process.Here is the dilema... I SSH into the box that will be listening (using tcpdump)...
ssh> sudo tcpdump -i eth0 > dump_file
yadda yadda...
then if I exit my ssh session, tcpdump closes.
If I do a...
ssh> sudo tcpdump -i eth0 > dump_file &
[1] 12938
yadda yadda.
How to get manual of tcpdump?
View 2 Replies View RelatedThe only window that's open is the terminal running this command, no pidgin, skype, samba, torrent or anything I can think of is using the network yet there is ***** load of output from tcpdump. I was hoping to use this to check where certain applications connect to and what messages they send but when I'm doing nothing there is already more output than I can go through. Running tcpdump for less than 10 seconds gives me the following output:
Code:
16:13:22.015683 IP ns.hihkptt.net.cn.domain > desk.local.56598: 46887 1/2/2 (166)
16:13:22.016251 IP ns.hihkptt.net.cn.domain > desk.local.60099: 21168 1/2/2 (166)
16:13:22.016743 IP ns.hihkptt.net.cn.domain > desk.local.42325: 50346 1/2/2 (166)
16:13:22.034733 IP ns.hihkptt.net.cn.domain > desk.local.41441: 63658 1/2/0 (134)
16:13:22.035215 IP ns.hihkptt.net.cn.domain > desk.local.42865: 37537 1/2/0 (134)
16:13:22.036124 IP ns.hihkptt.net.cn.domain > desk.local.35006: 7520 1/2/0 (134)
16:13:22.036569 IP ns.hihkptt.net.cn.domain > desk.local.38480: 51322 1/2/0 (134)
16:13:22.066006 ARP, Reply 192.168.0.1 is-at 00:b0:0c:02:60:9c (oui Unknown), length 46 .....
I am trying to create a dump log using tcpdump. I want display the top 10 ip addresses sorted numerically showing how many times the ips are hitting the server. I'm getting frustrated because It's not working how I'd like it to.
View 1 Replies View RelatedIs there a way to do multiple interfaces in tcpdump? I have found that when using "-i any", not all packets are captured (compared to "-i eth0" on a machine with only one interface). I need to monitor traffic on some machines with as many as 6 interfaces, and get these packets that "-i any" misses. When I give the "-i" option multiple times, it seems to only use the last one.
View 3 Replies View RelatedI'm trying to capture packets to a file with the -w option but the file is empty yet if I use the '-w -' option to put data on stdout I see plenty of captured packets.I'm using CentOS 5.5 x86
Code:
[root@server ~]# tcpdump -v -i eth0 -w dump -s0
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
[code]....
I am trying to analyze the output of tcpdump, but I am unable to figure out what the output is. as I think that the security my computer would be compromised by this output.
View 2 Replies View RelatedWhen attempting to run a tcdump in the background (IPSO) with the following command:
I get the message:
However the command runs fine without the '&' at the end of the line are there syntax restrictions in using the '&' flag?
I looked and have tcpdump installed on ubuntu 10.04 lts I can do a tcpdump --help and it gives the commands.I get no device found when I do tcpdump from the terminal window.my Ubuntu is having trouble looking up domains it just sits there and hangs looking up google.comI'm on a ATT 3mb DSL dry line running an asus netbook and a biostar via mobo desktop they both have trouble looking up domains right out of the DSL modem.I would try to set the DNS in ubuntu but I don't know how to do that without knowing the gateway and such. I have to get the IP of the computer, the netmask, the gateway, and the DNS for the manual setup.
View 3 Replies View Relatedi tried to install gcc-4.5.0 on opensuse 11.2 I gave ./configure but it gave the error couldn't find the c compiler.. the message was
[Code]....
I am having a problem installing SLES11 on a new server. It goes fine through the setup until it gets to GRUB, it gets me the following error message: Error occurred while installing GRUB
[code]...
I cant continue the installation without this
I need to start a tcpdump, and then download a file by FTP. I can't understand any way of achieving this in the tcpdump man file.
View 1 Replies View RelatedI'm trying to capture traffic between two machines, A and B. I would like to make sure that the traffic I capture with tcpdump is between eth1 on the local machine and eth0 on the remote machine. As I understand it, the -i flag specifies the local machine interface - but how to set the remote one?
View 3 Replies View Related