At 2:17 AM +0100 2/15/10, Johnny Billquist wrote:
Do anyone have experience with Apples pcap library? It is supposed to be
a plain bsd pcap, but I have a problem that I haven't figured out yet,
and thought that maybe someone here already knows, so I don't have to go
figure it out myself.
I have your bridge working on Mac OS X.
I forced
#define __FreeBSD__
to get
ioctl(BIOCIMMEDIATE, BIOCSHDRCMPLT) compiled.
I get the same packets as tcpdump, that is:
- broadcasts from all nodes, if I run on a distinct machine (no simulator)
router-hello, lev-1-routing, lev-2-routing
- broadcasts and unicasts to me, if I run on a machine hosting a simulator
link-service, data-ack, ils-ack, data
I am on a switched network with unmanaged switches, so i'm unable to sniff
all traffic for the moment.
--
Jean-Yves Bernier
In my local case, the bridge only have one UDP socket, and one local NIC.
I can even reduce it to only run with the NIC, and I still see the problem.
Johnny
Jason Stevens wrote:
Does you bridge have many connections to it? I recall last time I glanced thru the source code it wasn't using blocking sockets... perhaps its getting 'stuck' on a socket and effectively missing packets...?
On Mon, Feb 15, 2010 at 11:00 AM, Johnny Billquist <bqt at softjar.se <mailto:bqt at softjar.se>> wrote:
Very possibly. The annoying thing is the fact that tcpdump sees more
packets than I (my bridge) do.
Johnny
Sampsa Laine wrote:
Johnny,
Not sure this is related but I tried to run SIMH on OS X over
the wireless and DECNET didn't work - it might be more than just
a pcap issue, the problem could be OS X's wireless NIC drivers
or something.
Sampsa
On 15 Feb 2010, at 01:17, Johnny Billquist wrote:
Do anyone have experience with Apples pcap library? It is
supposed to be a plain bsd pcap, but I have a problem that I
haven't figured out yet, and thought that maybe someone here
already knows, so I don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all
packets, but I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of
them. I'm very curious on why tcpdump manages to see packets
that I don't see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have
tested, and done, and whatnot.
Johnny
-- Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se <mailto:bqt at softjar.se> ||
Reading murder books
pdp is alive! || tryin' to stay hip" -
B. Idol
Marc Chametzky wrote:
Not sure this is related but I tried to run SIMH on OS X over the wireless and DECNET didn't work - it might be more than just a pcap issue, the problem could be OS X's wireless NIC drivers or something.
Aren't there issues with wireless network connections only supporting a single MAC address thus making bridging not work properly?
Could be. However, in this case, I can definitely see that my bridge are not getting some packets that tcpdump are getting.
That discrepancy shouldn't be there, and is definitely not in the scope of the capabilities of the interface as such.
If I would have a situation where the bridge program and tcpdump would agree, and it still didn't work, then I would start looking at the possibility that the wireless interface didn't support all the stuff I need.
Johnny
Does you bridge have many connections to it? I recall last time I glanced thru the source code it wasn't using blocking sockets... perhaps its getting 'stuck' on a socket and effectively missing packets...?
On Mon, Feb 15, 2010 at 11:00 AM, Johnny Billquist <bqt at softjar.se> wrote:
Very possibly. The annoying thing is the fact that tcpdump sees more packets than I (my bridge) do.
Johnny
Sampsa Laine wrote:
Johnny,
Not sure this is related but I tried to run SIMH on OS X over the wireless and DECNET didn't work - it might be more than just a pcap issue, the problem could be OS X's wireless NIC drivers or something.
Sampsa
On 15 Feb 2010, at 01:17, Johnny Billquist wrote:
Do anyone have experience with Apples pcap library? It is supposed to be a plain bsd pcap, but I have a problem that I haven't figured out yet, and thought that maybe someone here already knows, so I don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all packets, but I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of them. I'm very curious on why tcpdump manages to see packets that I don't see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have tested, and done, and whatnot.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Very possibly. The annoying thing is the fact that tcpdump sees more packets than I (my bridge) do.
Johnny
Sampsa Laine wrote:
Johnny,
Not sure this is related but I tried to run SIMH on OS X over the wireless and DECNET didn't work - it might be more than just a pcap issue, the problem could be OS X's wireless NIC drivers or something.
Sampsa
On 15 Feb 2010, at 01:17, Johnny Billquist wrote:
Do anyone have experience with Apples pcap library? It is supposed to be a plain bsd pcap, but I have a problem that I haven't figured out yet, and thought that maybe someone here already knows, so I don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all packets, but I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of them. I'm very curious on why tcpdump manages to see packets that I don't see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have tested, and done, and whatnot.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Not sure this is related but I tried to run SIMH on OS X over the wireless and DECNET didn't work - it might be more than just a pcap issue, the problem could be OS X's wireless NIC drivers or something.
Aren't there issues with wireless network connections only supporting a single MAC address thus making bridging not work properly?
--Marc
Johnny,
Not sure this is related but I tried to run SIMH on OS X over the wireless and DECNET didn't work - it might be more than just a pcap issue, the problem could be OS X's wireless NIC drivers or something.
Sampsa
On 15 Feb 2010, at 01:17, Johnny Billquist wrote:
Do anyone have experience with Apples pcap library? It is supposed to be a plain bsd pcap, but I have a problem that I haven't figured out yet, and thought that maybe someone here already knows, so I don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all packets, but I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of them. I'm very curious on why tcpdump manages to see packets that I don't see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have tested, and done, and whatnot.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Speaking of which, it might be a good time to point out that the bridge program works fine on NetBSD, Linux and OpenBSD atleast (I think FreeBSD have also reported success).
And I'm now trying this on Snow Leopard. This is the first time I've tried on wireless as well.
So in general, there is nothing wrong with the program, nor the filter. I'm just having these problems explicitly on this platform. I can definitely see tcpdump printing out packets while the bridge program sits quite not receiving anything.
Johnny
Johnny Billquist wrote:
Yeah, possible problems with the filter program have been considered. I
tried skipping the filter program totally, but that didn't seem to solve
my problems. Might be worth examining a bit more anyway.
(I have a software check for "valid" packets as well, so skipping the
filter don't really hurt, except for performance reasons.)
Any suggestion on what libpcap might be good to use?
I seem to remember having problems with the network in simh as well,
when using it over wireless. I think I should test the wired interface
to see if the bridge works fine over that.
(I would sure like to check the tcpdump sources if they do something
funny...)
Johnny
Jason Stevens wrote:
sounds like a broke filter...?
I do recall it is quite touchy, and that when I used to build osx libpcap stuff (simh) in the past, I'd just download the latest pcap myself, and manually link that into the exe so it didn't use the system libpcap.....
On Sun, Feb 14, 2010 at 8:17 PM, Johnny Billquist <bqt at softjar.se <mailto:bqt at softjar.se>> wrote:
Do anyone have experience with Apples pcap library? It is supposed
to be a plain bsd pcap, but I have a problem that I haven't figured
out yet, and thought that maybe someone here already knows, so I
don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all packets, but
I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of them.
I'm very curious on why tcpdump manages to see packets that I don't
see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have tested,
and done, and whatnot.
Johnny
-- Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se <mailto:bqt at softjar.se> ||
Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
Yeah, possible problems with the filter program have been considered. I
tried skipping the filter program totally, but that didn't seem to solve
my problems. Might be worth examining a bit more anyway.
(I have a software check for "valid" packets as well, so skipping the
filter don't really hurt, except for performance reasons.)
Any suggestion on what libpcap might be good to use?
I seem to remember having problems with the network in simh as well,
when using it over wireless. I think I should test the wired interface
to see if the bridge works fine over that.
(I would sure like to check the tcpdump sources if they do something
funny...)
Johnny
Jason Stevens wrote:
sounds like a broke filter...?
I do recall it is quite touchy, and that when I used to build osx libpcap stuff (simh) in the past, I'd just download the latest pcap myself, and manually link that into the exe so it didn't use the system libpcap.....
On Sun, Feb 14, 2010 at 8:17 PM, Johnny Billquist <bqt at softjar.se <mailto:bqt at softjar.se>> wrote:
Do anyone have experience with Apples pcap library? It is supposed
to be a plain bsd pcap, but I have a problem that I haven't figured
out yet, and thought that maybe someone here already knows, so I
don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all packets, but
I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of them.
I'm very curious on why tcpdump manages to see packets that I don't
see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have tested,
and done, and whatnot.
Johnny
-- Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se <mailto:bqt at softjar.se> ||
Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
sounds like a broke filter...?
I do recall it is quite touchy, and that when I used to build osx libpcap stuff (simh) in the past, I'd just download the latest pcap myself, and manually link that into the exe so it didn't use the system libpcap.....
On Sun, Feb 14, 2010 at 8:17 PM, Johnny Billquist <bqt at softjar.se> wrote:
Do anyone have experience with Apples pcap library? It is supposed to be a plain bsd pcap, but I have a problem that I haven't figured out yet, and thought that maybe someone here already knows, so I don't have to go figure it out myself.
Running my bridge program on MAC OS X, I don't get all packets, but I do get some of them. I can't see a pattern to it.
This is done over wireless ethernet.
The interesting thing is that tcpdump manages to see all of them. I'm very curious on why tcpdump manages to see packets that I don't see... Anyone have any ideas?
Feel free to ask questions. I'll happily explain what I have tested, and done, and whatnot.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
