Subject: Re: [netatalk-admins] AFP packet filtering for tcpdump output
From: Fred Lindberg (lindberg@id.wustl.edu)
Date: Wed Nov 04 1998 - 18:31:04 EST
On Wed, 04 Nov 1998 17:47:00 -0500 (EST), Tom Kacvinsky wrote:
>I've looked in the netatalk-admins archive and done
>a search on the 'net, but I haven't found this:
>
> an AFP filter for output of tcpdump
I've started on it modifying tcpdump-3.4a5 by adding more filtering. My
netatalk problem was with bad broadcast addresses. I completed nbpkup
stuff, broadcast address checking, GNI[R] and some ZIP stuff. I ran
into packets on our net with byte order problems, and never followed
up. tcpdump is funny, since it removes UDP encapsulation without trace,
and it's possible that the byte order differs depending on
encapsulation. I just don't know enough to figure it out.
What I have works a lot better than tcpdump for appletalk. All my
changes are clearly documented. I'd be extatic if someone were to
complete this or point me in the right direction. This is incomplete,
so please don't reexport it (unless you improve it). My plan was to
send diffs to the tcpdump maintainters:
ftp://ftp.id.wustl.edu/outgoing/lindberg/tcpdump-3.4a5.atalk.tgz
NOTE: This will create a tcpdump-3.4a5 directory, possibly overwriting
your virgin sources. Rename any tcpdump-3.4a5 directory to
tcpdump-3.4a5.orig. I'm happy to make a diff available.
-Sincerely, Fred
(Frederik Lindberg, Infectious Diseases, WashU, St. Louis, MO, USA)
This archive was generated by hypermail 2b28 : Sat Dec 18 1999 - 16:33:40 EST