kêÄ¥„>8¥„>8ÿÿÿby nameby namerootd kênO¤¼¤„>8¥„>8¥„>8ð{¼./lpp_nameó/¤4 R I freeware.perl.net.pcap { freeware.perl.net.pcap.rte 00.03.0000.0000 01 N U en_US Net::Pcap - Perl Packet Capture Module [ *prereq freeware.perl.rte 5.5.3.0 *prereq freeware.libpcap.rte 0.4.0.0 % /usr 5 /usr/local 7 /usr/local/bin 1 /usr/local/lib 7 /usr/local/lib/perl5 3 /usr/local/lib/perl5/site_perl 3 /usr/local/lib/perl5/site_perl/5.005 5 /usr/local/lib/perl5/site_perl/5.005/aix 5 /usr/local/lib/perl5/site_perl/5.005/aix/auto 3 /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net 5 /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap 93 /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils 2 /usr/local/lib/perl5/site_perl/5.005/aix/Net 18 /usr/local/lib/perl5/site_perl/5.005/Net 18 /usr/local/lib/Net-Pcap-0.03 9 /usr/local/lib/Net-Pcap-0.03/t 63 /usr/local/lib/Net-PcapUtils-0.01 6 /usr/local/lib/Net-PcapUtils-0.01/t 6 /usr/local/man 3 /usr/local/man/man3 49 /usr/lpp 3 /usr/lpp/freeware.perl.net.pcap 1 INSTWORK 28 28 % % % % ] } kêâKá íAŸ„>8¤„>8¤„>8p½./usr/lpp/freeware.perl.net.pcapó/íA kê´7Ë ¤Œ=¤„>8¤„>8¤„>8Ð: Œ=./usr/lpp/freeware.perl.net.pcap/liblpp.aó/¤ 15378 0 68 14506 0 2232 2420 0 943621277 0 0 644 29 freeware.perl.net.pcap.rte.al` ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.so ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.bs ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/.packlist ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils/.packlist ./usr/local/lib/perl5/site_perl/5.005/aix/Net/Pcap.pm ./usr/local/lib/perl5/site_perl/5.005/Net/PcapUtils.pm ./usr/local/lib/Net-Pcap-0.03/t/leaktest6.pl ./usr/local/lib/Net-Pcap-0.03/t/11-misc.t ./usr/local/lib/Net-Pcap-0.03/t/08-filter.t ./usr/local/lib/Net-Pcap-0.03/t/09-error.t ./usr/local/lib/Net-Pcap-0.03/t/13-dispatch.t ./usr/local/lib/Net-Pcap-0.03/t/07-stats.t ./usr/local/lib/Net-Pcap-0.03/t/05-dump.t ./usr/local/lib/Net-Pcap-0.03/t/02-lookup.t ./usr/local/lib/Net-Pcap-0.03/t/10-fileno.t ./usr/local/lib/Net-Pcap-0.03/t/04-loop.t ./usr/local/lib/Net-Pcap-0.03/t/README ./usr/local/lib/Net-Pcap-0.03/t/12-next.t ./usr/local/lib/Net-Pcap-0.03/t/03-openlive.t ./usr/local/lib/Net-Pcap-0.03/t/01-module.t ./usr/local/lib/Net-Pcap-0.03/t/leaktest1.pl ./usr/local/lib/Net-Pcap-0.03/t/06-offline.t ./usr/local/lib/Net-Pcap-0.03/t/leaktest2.pl ./usr/local/lib/Net-Pcap-0.03/t/leaktest3.pl ./usr/local/lib/Net-Pcap-0.03/t/leaktest4.pl ./usr/local/lib/Net-Pcap-0.03/t/leaktest5.pl ./usr/local/lib/Net-Pcap-0.03/MANIFEST ./usr/local/lib/Net-Pcap-0.03/README ./usr/local/lib/Net-PcapUtils-0.01/README ./usr/local/lib/Net-PcapUtils-0.01/t/03-next.t ./usr/local/lib/Net-PcapUtils-0.01/t/01-loop.t ./usr/local/lib/Net-PcapUtils-0.01/t/02-open.t ./usr/local/man/man3/Net__Pcap.3 ./usr/local/man/man3/Net__PcapUtils.3 ./usr/local ./usr/local/bin ./usr/local/lib ./usr/local/lib/perl5 ./usr/local/lib/perl5/site_perl ./usr/local/lib/perl5/site_perl/5.005 ./usr/local/lib/perl5/site_perl/5.005/aix ./usr/local/lib/perl5/site_perl/5.005/aix/auto ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils ./usr/local/lib/perl5/site_perl/5.005/aix/Net ./usr/local/lib/perl5/site_perl/5.005/Net ./usr/local/lib/Net-Pcap-0.03 ./usr/local/lib/Net-Pcap-0.03/t ./usr/local/lib/Net-PcapUtils-0.01 ./usr/local/lib/Net-PcapUtils-0.01/t ./usr/local/man ./usr/local/man/man3 760 3306 68 943015573 0 0 644 36 freeware.perl.net.pcap.rte.copyright` Net::Pcap - Perl Packet Capture Module, version 0.3 Copyright (c) 1999 Tim Potter. Copyright (c) 1995,1996,1997,1998,1999 ANU and CSIRO All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. Plaese refer to the README file delivered in the directory /usr/local/lib/Net-Pcap-0.3 for complete details. The other files delivered in the same directory should also be read. Packaging is Copyright (C) 1999 BULL SA. This LPP may not be redistributed comercially. No warranty or support in any form is offered with this LPP. Groupe Bull will not be liable for errors contained herein, or for incidental or consequential damages in connection with the use of this material. 9429 12864 2420 943621283 0 0 644 36 freeware.perl.net.pcap.rte.inventory` /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.so: owner = root group = system mode = 555 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 45677 checksum = "55402 45 " /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.bs: owner = root group = system mode = 444 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 0 checksum = "00000 0 " /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/.packlist: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 211 checksum = "52097 1 " /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils/.packlist: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 91 checksum = "34255 1 " /usr/local/lib/perl5/site_perl/5.005/aix/Net/Pcap.pm: owner = root group = system mode = 444 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 8581 checksum = "64891 9 " /usr/local/lib/perl5/site_perl/5.005/Net/PcapUtils.pm: owner = root group = system mode = 444 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 8668 checksum = "13929 9 " /usr/local/lib/Net-Pcap-0.03/t/leaktest6.pl: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 702 checksum = "58077 1 " /usr/local/lib/Net-Pcap-0.03/t/11-misc.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1283 checksum = "24160 2 " /usr/local/lib/Net-Pcap-0.03/t/08-filter.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1093 checksum = "33417 2 " /usr/local/lib/Net-Pcap-0.03/t/09-error.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1098 checksum = "39327 2 " /usr/local/lib/Net-Pcap-0.03/t/13-dispatch.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1023 checksum = "17509 1 " /usr/local/lib/Net-Pcap-0.03/t/07-stats.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 964 checksum = "56803 1 " /usr/local/lib/Net-Pcap-0.03/t/05-dump.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1471 checksum = "51741 2 " /usr/local/lib/Net-Pcap-0.03/t/02-lookup.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1190 checksum = "35869 2 " /usr/local/lib/Net-Pcap-0.03/t/10-fileno.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 2482 checksum = "33703 3 " /usr/local/lib/Net-Pcap-0.03/t/04-loop.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1162 checksum = "40414 2 " /usr/local/lib/Net-Pcap-0.03/t/README: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 344 checksum = "00429 1 " /usr/local/lib/Net-Pcap-0.03/t/12-next.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1880 checksum = "27714 2 " /usr/local/lib/Net-Pcap-0.03/t/03-openlive.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 814 checksum = "29824 1 " /usr/local/lib/Net-Pcap-0.03/t/01-module.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 173 checksum = "61776 1 " /usr/local/lib/Net-Pcap-0.03/t/leaktest1.pl: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 736 checksum = "38031 1 " /usr/local/lib/Net-Pcap-0.03/t/06-offline.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 2821 checksum = "56202 3 " /usr/local/lib/Net-Pcap-0.03/t/leaktest2.pl: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 345 checksum = "29371 1 " /usr/local/lib/Net-Pcap-0.03/t/leaktest3.pl: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 669 checksum = "52243 1 " /usr/local/lib/Net-Pcap-0.03/t/leaktest4.pl: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 810 checksum = "33914 1 " /usr/local/lib/Net-Pcap-0.03/t/leaktest5.pl: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 690 checksum = "35716 1 " /usr/local/lib/Net-Pcap-0.03/MANIFEST: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 328 checksum = "19139 1 " /usr/local/lib/Net-Pcap-0.03/README: owner = root group = system mode = 444 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 2156 checksum = "28508 3 " /usr/local/lib/Net-PcapUtils-0.01/README: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 1185 checksum = "18186 2 " /usr/local/lib/Net-PcapUtils-0.01/t/03-next.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 574 checksum = "13036 1 " /usr/local/lib/Net-PcapUtils-0.01/t/01-loop.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 492 checksum = "10240 1 " /usr/local/lib/Net-PcapUtils-0.01/t/02-open.t: owner = root group = system mode = 644 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 328 checksum = "50965 1 " /usr/local/man/man3/Net__Pcap.3: owner = root group = system mode = 444 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 14589 checksum = "59051 15 " /usr/local/man/man3/Net__PcapUtils.3: owner = root group = system mode = 444 type = FILE class = apply,inventory,freeware.perl.net.pcap.rte size = 9113 checksum = "56177 9 " /usr/local: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/bin: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/aix: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/aix/auto: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/aix/Net: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/perl5/site_perl/5.005/Net: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/Net-Pcap-0.03: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/Net-Pcap-0.03/t: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/Net-PcapUtils-0.01: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/lib/Net-PcapUtils-0.01/t: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/man: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte /usr/local/man/man3: owner = root group = system mode = 755 type = DIRECTORY class = apply,inventory,freeware.perl.net.pcap.rte 1264 14252 3306 943016300 0 0 755 33 freeware.perl.net.pcap.rte.post_i` #!/usr/bin/ksh LANG=C VERBOSE=${VERBOSE:-"0"} # simple debug system # # error handler (v2.1 - July 1998): cmd() { [ $VERBOSE -gt 7 ] && print "CMD: execute '$@'" >&2 eval '"$@"' [ $? -ne 0 ] && print "CMD: error detected in '$@'" >&2 && exit 2 } if ! cd /usr/local/lib/perl5/. then cmd print "Perl not installed correctly, can't find directory" cmd print "/usr/local/lib/perl5" exit 1 fi if ! ls */aix/perllocal.pod > /dev/null 2>&1 then filename=$(ls -d 5.*/aix | tail -1) if [ "$filename" = "" ] then cmd print "Perl not installed correctly, can't find directory" cmd print "/usr/local/lib/perl5/5.00*/aix" exit 3 fi filename="$filename/perllocal.pod" else filename=$(cmd ls -d */aix/perllocal.pod | tail -1) fi cmd cat >>$filename < L =over 4 =item * C =item * C =item * C =item * C =back =head2 Fri Nov 19 13:56:28 1999: C L =over 4 =item * C =item * C =item * C =item * C =back HELLO exit 0 132 14506 12864 943015207 0 0 755 32 freeware.perl.net.pcap.rte.pre_i` #!/usr/bin/ksh LANG=C cmd() { eval '"$@"' [ $? -ne 0 ] && print "CMD - error detected in '$@'" && exit 2 } exit 0 750 15378 14252 943621279 0 0 644 31 freeware.perl.net.pcap.rte.size` ./usr 5 ./usr/local 7 ./usr/local/bin 1 ./usr/local/lib 7 ./usr/local/lib/perl5 3 ./usr/local/lib/perl5/site_perl 3 ./usr/local/lib/perl5/site_perl/5.005 5 ./usr/local/lib/perl5/site_perl/5.005/aix 5 ./usr/local/lib/perl5/site_perl/5.005/aix/auto 3 ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net 5 ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap 93 ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils 2 ./usr/local/lib/perl5/site_perl/5.005/aix/Net 18 ./usr/local/lib/perl5/site_perl/5.005/Net 18 ./usr/local/lib/Net-Pcap-0.03 9 ./usr/local/lib/Net-Pcap-0.03/t 63 ./usr/local/lib/Net-PcapUtils-0.01 6 ./usr/local/lib/Net-PcapUtils-0.01/t 6 ./usr/local/man 3 ./usr/local/man/man3 49 ./usr/lpp 3 ./usr/lpp/freeware.perl.net.pcap 1 287 0 14506 0 0 0 0 0 ` 6 68 2420 3306 12864 14252 14506 freeware.perl.net.pcap.rte.alfreeware.perl.net.pcap.rte.copyrightfreeware.perl.net.pcap.rte.inventoryfreeware.perl.net.pcap.rte.post_ifreeware.perl.net.pcap.rte.pre_ifreeware.perl.net.pcap.rte.sizeinve kê¤ê²“mm²Ÿ„>8ÍZ>8ÍZ>80e•m²./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.soó/mß8>ZqtžÎH0 9ØPÿÿÿÿ ÜRE.text9Ø@Z .dataP;nô‘@.bssPP€.loaderYIh‚A€ €L| ¦N€  b‹8qŒA‚´|¦| +|à"*A‚H|…8@@@@†|Aš L˜Hp|£+|ä*A‚$0|…8@@@|£+@†P@šD|ä*@‚ÿä|¦, TøA|¥0|ç0|…8@H|…8@|Æ0}0@@@† L˜A†A… 8`ÿÿN€ 8`N€ 8`N€ 8cÿÿ8„ÿÿˆ£ˆÄ,|…0@A‚Œ£@†ŒÄ,|…0@KÿÿèA†A…8`ÿÿN€ 8`N€ 8`N€ @strcmp€b|¦¿!ÿ䀣ƒâ ƒÂ€Ÿ€Å€8¥ÿü£TÅ:|£p|c”|¤*||pZ”8T:|dØ.”!ÿ ;€ƒ¢€tA‚ €c€@|dØ.€cƒ#H8@H/!€A`y,A€€|`ÚƒCHd;L8}Dc$c…H/€A8€H/1€A|zyA‚€t@‚,;`8}Xc$c…H.Ý€A8€H.ù€A`z,A‚À€tA‚LtA‚€z€@€z€ƒH8@cCH.a€A`d8}hKÿýq`,A‚l8Ýp,@‚8ýx8ÝtHc'9|@‚,;„9€8½˜8} tc$c‰cJH.y€AH 8½˜8} tc$c‰cJH.Y€A€‚(8} 8½( @‚d8@"˜€aP|©„ª|¤…ªH+Á€A|{y€yƒCA‚08~øKÿùm€A€@aT`H+¹€A`f8žðcC€¡T8àH+Å€A8~Kÿù1€A€DaX`H+}€A`f8žcC€¡X8àH+‰€A8~Kÿøõ€A€Ha\`H+A€A`f8žcC€¡\8àH+M€A8~$Kÿø¹€A€La``H+€A`f8ž cC€¡`8àH+€A€HccH+)€A`{€||“#€Ÿ|dâ€c€p@A‚LH<ƒb¬H8~(H)Ñ€A€||“#€Ÿ|dâ€c€p@A‚H*å€A€Ÿdá.€|cà.H*õ€A€|âˆ8!€»!ÿä}ˆ¦N€ €Ѐ‚|¦¿Aÿ耤ƒâ ƒ¢€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ,;„ƒÂA‚8~ ,H(ñ€A€Wœ:8žH|£âƒe|cà.ƒEH)€A,A‚@€|cà.€c€c€tA‚€c€c aPH H) €AaPH8~ PH(}€A€tA‚€{€c€T>( @‚ü8@"˜8~d|©„ª|¤…ª€›ƒdKÿö€A`e8ž\cc8ÀH)­€A,A‚<€c€tA‚ €c€c a@8~tKÿöU€AHH(Y€Aa@8~tKÿö9€A`e8žlcc8ÀH)I€A,A‚<€c€tA‚ €c€c aD8~„Kÿõñ€AHH'õ€AaD8~„KÿõÕ€A`e8ž|cc8ÀH(å€A,A‚<€c€tA‚ €c€c aH8~Kÿõ€AHH'‘€AaH8~Kÿõq€A`e8žŒcc8ÀH(€A,A‚@€c€tA‚$€c€c aL€€‚¼tA‚( @‚Ø8@€aLH&e€A€œaP8~ ƒ„Kÿñ•€A€@aT`H#á€A`f8ž˜cƒ€¡T8àH#í€A8~°KÿñY€A€DaX`H#¥€A`f8ž¨cƒ€¡X8àH#±€A8~ÄKÿñ€A€Ha\`H#i€A`f8ž¸cƒ€¡\8àH#u€AH8~ÐH"u€AH$u€A€¿€P|eÙ.€|cØ.H%™€A€|Úˆ8!€»aÿì}ˆ¦N€ €$€b|¦¿ÿð€ƒƒâ ƒ‚€¿€Ä€8„ÿüƒTÄ:|e"||p|”|ƒp|c””!ÿ ,;£ƒÂA‚8~ H!µ€A€¿W½:€‚¼|Åê€f€tA‚4€c€€f€c€ca@|eè.8ž(H!¹€AH$H å€A€¿a@|eè.8ž(H!•€A,A‚@€|cè.€c€c€tA‚€c€c aDH H!€AaDH8~4H õ€A€aD€@H$U€A€|`ê8ÿüh8!`»ÿð}ˆ¦N€ €`€‚|¦¿ÿð€¤ƒâ ƒ‚€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ ,;¤ƒÂA‚8~äH E€A€W½:8ž|cè.H }€A,A‚@€|cè.€c€c€tA‚€c€c a@H H i€Aa@H8~ HÝ€A€a@H#i€AaDH!Í€A€¿€D|eé.€|cè.H"ñ€A€|êh8!`»ÿð}ˆ¦N€ €(€‚|¦¿ÿð€¤ƒâ ƒ‚€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ ,;¤ƒÂA‚8~ ¼H €A€W½:8ž¤|cè.HE€A,A‚D€Ÿ|dè.€c€c€tA‚€c€c a@H(H1€A€Ÿa@H8~°H¡€A€Ÿ|dê€c8žÌHÙ€A,A‚D€|`ê€c€c€c€tA‚€c€c aDH HÁ€AaDH8~ àH5€A€a@€DH!å€AaHH !€A€¿€H|eé.€|cè.H!E€A€|êh8!`»ÿð}ˆ¦N€ €œ€b|¦¿aÿ쀃ƒâ ƒb€¿€Ä€8„ÿüƒTÄ:|e"||p|”|ƒp|c””!ÿ,;£ƒÂA‚8~ „Ha€A€¿W½:€‚¼|Åê€fƒ†€tA‚4€c€€f€c€ca@|…ê€d €tH$H€A€¿a@|…ê€d €tA‚(€c€c aD|…ê€d€tA‚8H(H5€A€¿aD|…ê€d€tA‚€c€c HH€A€¿aH|eè.8žLHÅ€A,A‚@€|cè.€c€c€tA‚€c€c aLH H±€AaLH8~XH%€A€tA‚€8`Hõ€AaP€aL€¡@€ÁD€áH€PHý€AaT€8žt€¡P|`ê€c€c€cHý€A€|}“ƒ€|`ê€c€p@A‚@H48~ŒH‘€A€|}“ƒ€|`ê€c€p@A‚ H¥€AHe€A€¿€T|eé.€|cè.H‰€A€|êx8!p»aÿì}ˆ¦N€ €¬€‚|¦¿¡ÿô€¤ƒâ ƒ¢€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ°,;ÄA‚€b8c `H¥€A€WÞ:|cð.€tA‚€c€c H Hñ€AHÑ€Aa@Hm€A€¿€@|eñ.€|cð.HÑ€A€|òX8!P»¡ÿô}ˆ¦N€ €耂|¦¿ÿð€¤ƒâ ƒ‚€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ ,;¤ƒÂA‚8~H­€A€W½:8ž$|cè.Hå€A,A‚@€|cè.€c€c€tA‚€c€c a@H HÑ€Aa@H8~0HE€A€a@Hé€AaDH5€A€¿€D|eé.€|cè.H™€A€|êh8!`»ÿð}ˆ¦N€ €(€‚|¦¿ÿð€¤ƒâ ƒ‚€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ ,;¤ƒÂA‚8~ | @œ¼€tA‚¬€tA‚ 8`H é€AaH€¼€Ú€›ƒ8¡@ƒ&‚ä8Dc£€ÁHH ý€A,ÿÿaL€DA‚0cHù€A€@c#Hé€A€aHH u€AHpbã€HH €A€aHH U€AHPAœ€b8cLH]€A€t@‚€b8cdHA€A€t@‚€b8c|H%€A€|~“ƒ€|`ò€c€ƒp„@A‚H9€A€|~“C€|`ò€c€ƒp„@A‚H €A€|~“c €|`ò€c €p@A‚ Há€AH¡€A€¿€L|eñ.€|cð.HÅ€A€|òˆ8!€ºÁÿØ}ˆ¦N€ € °€‚|¦¿Aÿ耤ƒâ ƒÂ€€Å€8¥ÿü¤TÅ:|ƒ*||p|”|¤p|„””!ÿ ,;¤A‚€b8c Há€A€W½:ƒè.€tA‚L8`H¥€Aa@€œƒdH €A|zy@‚cc€@H€A€a@H e€AH€b8c8Hq€A€ƒé.€|cè.€p@A‚ H€AHM€A€¿cD|eé.€|cè.H±€A€|êh8!`»Aÿè}ˆ¦N€ €D¿!ÿä|¦``ž€ž”!ÿ`£Hé€A`}H E€Aa@H9€Aƒ‚ƒb`zƒ;8|KÿÑ€A€aD`HQ€A`f€a@c„€¡D8àH]€A8|KÿÐÉ€A€aH`H€A`f8œ€a@€¡H8àH!€A8|(KÿЀA€aL`HÙ€A`f8œ €a@€¡L8àHå€A8|4KÿÐQ€A€ aP`H€A`f8œ0€a@€¡P8àH©€AƒÂ€b`€€~8c|@~@‚H 9€A€~€‚ ƒÂh€|È|p|”€||p|•Ac#`d8 H €A`y“ù€8y||p|•A`d8 Hé€A“C€8ƒ||p|•A8 `ƒH½€A`d8€b0“¤€c8€HÁ€Ac£Hý€A€a@Hñ€AcCHå€Ax8!p»!ÿä}ˆ¦N€ €h‚A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚ A€ €L| ¦N€  ‚$A€ €L| ¦N€  ‚,A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚”A€ €L| ¦N€  ‚œA€ €L| ¦N€  ‚ A€ €L| ¦N€  ‚¤A€ €L| ¦N€  ‚¨A€ €L| ¦N€  ‚°A€ €L| ¦N€  ‚´A€ €L| ¦N€  ‚¸A€ €L| ¦N€  ‚ÀA€ €L| ¦N€  ‚ÄA€ €L| ¦N€  ‚ÈA€ €L| ¦N€  ‚ÌA€ €L| ¦N€  ‚ÐA€ €L| ¦N€  ‚ÔA€ €L| ¦N€  ‚ØA€ €L| ¦N€  ‚ÜA€ €L| ¦N€  ‚àA€ €L| ¦N€  ‚äA€ €L| ¦N€  ‚èA€ €L| ¦N€  ‚ìA€ €L| ¦N€  ‚ðA€ €L| ¦N€  ‚ôA€ €L| ¦N€  ‚øA€ €L| ¦N€  ‚üA€ €L| ¦N€  ‚A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚ A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚A€ €L| ¦N€  ‚ A€ €L| ¦N€  ‚$A€ €L| ¦N€  ‚(A€ €L| ¦N€  ‚,A€ €L| ¦N€  ‚8A€ €L| ¦N€  ‚ ÿ Z@strlen@ @-@PL_na@@@P@_@m@{@‡@ ”@ £@ ¯@ Á@ Ñ@ á@ ÷@ @ @ "@ /@ >@ M@ \@ i@ y@ ‹@ @ «@ ½@ Ë@ Û@ ò@ @ @ %@ 5@ I@ Y@ h@ v@ ‡@ ”@ ¥@ µ@ Ã@ Ï@ ä@ ù@  @ @ +@ 9@ G@ S@ c@ o@ |@ @ ž@ ­@ ¹@ Ë@ Ü@ ð ¤ ¤ ¨ ° ´ ¼ À È Ì Ô Ø à ä ì ð ø ü       ( , 4 8 @ D L P X \ d h p t | € ˆ Œ ” ˜   ¤ ¬ ° ¸ ¼ Ä È Ð Ô Ü à ä è ì  ð ô! ø ü+          $ ( , 0 4 8 < @ D H L P T X \ ` d h  l# p t x9 | € „ ˆ  Œ  ” ˜ œ@  1 ¤% ¨ ¬ ° ´ ¸" ¼) À- Ä& È8 Ì0 Ð, Ô Ø? Ü( à/ ä' è7 ì2 ð3 ô4 ø5 ü6A< :$; B$C(,.0=4>8<@D HL*/usr/local/lib:/usr/lib:/liblibc.ashr.olibpcap.ashr.o_system_configurationPL_markstack_maxPL_markstack_ptrPL_stack_base PL_stack_max PL_stack_sp PL_sv_undef PL_sv_yes Perl_croak Perl_do_open Perl_formPerl_gv_stashpvPerl_hv_fetchPerl_hv_storePerl_markstack_grow Perl_mg_setPerl_newGVgen Perl_newHV Perl_newRV Perl_newSViv Perl_newSVpv Perl_newSVsv Perl_newXSPerl_safefreePerl_safemallocPerl_stack_grow Perl_sv_2ivPerl_sv_2mortal Perl_sv_2pvPerl_sv_blessPerl_sv_derived_from Perl_sv_freePerl_sv_newmortalPerl_sv_setivPerl_sv_setpvPerl_sv_setref_pvPerl_sv_setsv perl_call_sv perl_get_svpcap_setfilter pcap_statspcap_open_livepcap_strerror pcap_fileno pcap_filepcap_minor_versionpcap_major_versionpcap_is_swappedpcap_snapshotpcap_datalink pcap_geterr pcap_perror pcap_nextpcap_dispatch pcap_loop pcap_closepcap_lookupnetpcap_lookupdev pcap_compile pcap_dumppcap_dump_closepcap_dump_openpcap_open_offlineboot_Net__Pcap„@@B†rˆ‚ŠŠŒÒŽ¾™4Ù@È™lÙxÈ™À¾™Ð@™ Í™@Í™J˜TÒ™^œhÒ™rž|Ò™† Ò™š¢¤Ò™®¤¸Ò™¦ÌÒ™Ö¨àÒ™êªôÒ™þ¬Ò™®Ò™&°0Ò™:²DÒ™N´XÒ™b¶lÒ™v¸€Ò™Šº”Ò™ž¼¨Ò™²¾¼Ò™ÆÀÐÒ™ÚÂäÒ™îÄøÒ™Æ Ò™È Ò™*ÊfˆvŠ~Œ¾ŽÈÍ™è×™$Ü™8Í™jÐxá™”¹™¨æ™Äë™Ð¹™äæ™ë™ ¹™ æ™<ë™H¹™\æ™x뙈ð™¾ÚÈÍ™ôõ™ ú™FˆVŠ^ŒžŽ¨Í™Ì×™ Ü™ Í™ NÐ d¹™ |ÿ™ ¬¹™ ¸Ü™ ȹ™ àÿ™ ¹™ Ü™ ,¹™ Dÿ™ t¹™ €Ü™ ¹™ ¨ÿ™ Úâ èÜ™ úâ ¾™ 4™ DÍ™ ‚ˆ ’Š šŒ ÚŽ äÍ™ ü×™ 8Ü™ LÍ™ X ™ d™ x™ œ™ ¸™ Ì"™ Ü'™ ì,™ Ú Nˆ ^Š fŒ ¦Ž °Í™ Ð×™ Ü™ Í™T1™l¹™€æ™œë™¨¹™¼æ™Øë™ä¹™øæ™ë™$Í™,™H6™‚ˆ’ŠšŒÚŽäÍ™öâ0×™<¾™Tיܙ¤Í™´;™òˆŠ ŒJŽTÍ™l×™¨Ü™¼Í™È@™Ô™ð6™*ˆ:ŠBŒ‚ŽŒÍ™¤×™àÜ™øÍ™×™PÜ™dÍ™tE™€™œ6™ÖˆæŠîŒ.Ž8Í™J┾™ÜÜ™ Ü™$×™`Ü™tÍ™ŒJ™¬O™ÔT™Í™4õ™<™X6™’ˆ¢ŠªŒîŽôÍ™ Ü™(Y™4™P^™ŠˆšŠ¢ŒâŽìÍ™×™@Ü™TÍ™`c™l™ˆ^™ˆÒŠÚŒŽ$Í™<×™xÜ™ŒÍ™˜h™¤™À6™úˆ ŠŒRŽ\Í™t×™°Ü™ÄÍ™Ðm™Ü™ø6™2ˆBŠJŒŠŽ”Í™¬×™èÜ™üÍ™r™™06™jˆzŠ‚ŒÂŽÌÍ™ä×™ Ü™4Í™@w™L™h6™¢ˆ²ŠºŒúŽÍ™×™XÜ™lÍ™x|™„™ 6™ÚˆêŠòŒ2Ž<Í™Tיܙ¤Í™°™îˆþŠ Œ FŽ PÍ™ h×™ ¤Ü™ ¸Í™ Ć™!ˆ!Š!Œ!ZŽ!dÍ™!¨×™!´Ü™!Ø×™"Ü™"(Í™"4‹™">"H‹™"V"d™"t•™"€•™"ˆ™"¤6™"Þˆ"îŠ"öŒ#6Ž#@Í™#„×™#Ü™#´×™#ðÜ™$Í™$‹™$$$‹™$2$@š™$P•™$\•™$d™$€6™$ºˆ$ÊŠ$ÒŒ%Ž%Í™%.â%h×™%t¾™%Œ×™%ÈÜ™%ÜÍ™%쟙%ø™&T™&Rˆ&bŠ&jŒ&ªŽ&´Í™&Æâ'¾™'0J™'L¤™'d^™'p©™'€Í™'¬õ™'´™'ÔT™(ˆ(Š(&Œ(fŽ(pÍ™(‚â(ľ™) Ü™)<Ü™)„Ü™)¬J™)Ô®™)ì^™)ø©™*Í™*4õ™*<™*\T™*–ˆ*¦Š*®Œ*òŽ*øÍ™+ â+L¾™+˜J™+̳™+è6™+ø6™,©™,^™,$©™,6Ž,<Í™,RŽ,XÍ™,nŽ,tÍ™, õ™,Ìõ™,øõ™-™-6™-Vˆ-fŠ-nŒ-²Ž-¸Í™-ÜJ™-ð¸™.^™.©™."Ž.(Í™.Lõ™.T™.p^™.Èð™.Ô½™.à™.êŽ.îŒ.ü¹™/æ™/,ë™/8¹™/Læ™/hë™/t¹™/ˆæ™/¤ë™/°¹™/Äæ™/àë™/êˆ/î40™0Š080PÇ™0€Ç™0¬Ç™0¾0ÐÌ™0Ü•™0è•™0ô•™1"1J’1r”1š–1š1êÌ2Î2:Ò2bÔ2ŠÖ2²Ø2ÚÜ3Þ3*à3Rä3zæ3¢è3Êê3òì4î4Bð4jò4’ô4ºö4âø5 ú52ü5Zþ5‚5ª5Ò5ú6"6J 6r 6š6Â6ê77:7b7Š7² 7Ú"8$8*&8R(8z*8¢,8Ê.8ò0929B69j:9’< ¤H ¨‚ °x ´‚ ¼v À‚ Èt Ì‚ Ôr Ø‚ àp ä‚ ìn ð‚ øl ü‚ j ‚ h ‚ f ‚ (d ,‚ 4b 8‚ @` D‚ L^ P‚ X\ \‚ dZ h‚ pX t‚ |V €‚ ˆT Œ‚ ”R ˜‚  P ¤‚ ¬N °‚ ¸L ¼‚ ÄJ È‚ Ðz Ô‚ Ü à ä6 è: ì> ð~ ôl øH ü€ D ‚ ` „ † ˆ Š Œ Ž $ (’ ,” 0– 4˜ 8š <œ @ž D  H¢ L¤ P¦ T¨ Xª \¬ `® d° hB lp ph t| x |Z €N „\ ˆ@ ŒR j ”L ˜8 œ,   ¤t ¨T ¬F °X ´J ¸n ¼| À Äv È Ì  Ð Ôd Ø* Üz à  äx è ì ð ô ø ü.$^ ²´ r" 0$2(b,0&4(8V<4@PD<HfL~strlen  ) 4 C Q ] g z   « ¹ Å Ñ Û é ó þ    ) 3 C R duPL_na†”¡­¹Ã Î Û å õ   % 1 ? J U b o | ‡ • ¥ µ Á Ñ Ý ë     - ; M [ h TOC Ükstrlen Ük àku äk† èk¡ ìk_$STATIC ðkÑ ôkÛ økh ükà kt k| k‹ k¢ k¹ kÓ kê kü k $k% (k= ,kS 0ki 4k 8kœ <k· @kË Dká Hkö Lk Pk! Tk5 XkH \kZ `kl dk¹ hkë lkµ pk tkÑ xkU |k €kb „k­ ˆk% ŒkÁ kõ ”kPL_na ˜k) œk]  k ¤k1 ¨kÎ ¬kJ °kå ´kÝ ¸kM ¼k) Àk ÄkÅ ÈkQ Ìk Ðk• Ôk Øk; ÜkC àk- äk¹ èkg ìkz ðk ôk øk« ük3kókok~ kŠkÛkkékC kR$k‡(k4,kþ0k 4k?8kd<k@k”Dk¥Hk[Lk ?ÿþùgstrcmp.sBÿþ g.strcmp@0).file¶ÿþgPcap.c›µpk/°Ýp Fíd FD F € F& L F:€ FOð Fd( F|Ô F’ F©ˆ F¾À FÚø Fö0 Fh F&  F=Ø FVì Fj! F"Ü F”$¸ F¬&P FÇ(  Fß*” F÷-T F.¨ F9¸k _$STATICk ¤Þ ¤  t °  ‹ ¼  ¢ È  ¹ Ô  Ó à  ê ì  ü ø     %   =   S (  i 4   @  œ L  · X  Ë d  á p  ö |   ˆ  ! ”  5    H ¬  Z ¸  l Ä  ~PŠ Ð  glink.s»ÿþ g.strlenk(.strlen·glink.sÀÿþ g!1 k(!1 ¼glink.sÅÿþ g.1Hk(.1HÁglink.sÊÿþ g91pk(91pÆglink.sÏÿþ gF1˜k(F1˜Ëglink.sÔÿþ gR1Àk(R1ÀÐglink.sÙÿþ g^1èk(^1èÕglink.sÞÿþ gt2k(t2Úglink.sãÿþ g28k(28ßglink.sèÿþ gŒ2`k(Œ2`äglink.síÿþ gš2ˆk(š2ˆéglink.sòÿþ g©2°k(©2°îglink.s÷ÿþ g·2Øk(·2Øóglink.süÿþ gÄ3k(Ä3øglink.sÿþ gÕ3(k(Õ3(ýglink.sÿþ gä3Pk(ä3Pglink.s ÿþ gï3xk(ï3xglink.sÿþ gú3 k(ú3  glink.sÿþ g 3Èk( 3Èglink.sÿþ g 3ðk( 3ðglink.sÿþ g *4k( *4glink.s$ÿþ g 64@k( 64@ glink.s)ÿþ g G4hk( G4h%glink.s.ÿþ g V4k( V4*glink.s3ÿþ g e4¸k( e4¸/glink.s8ÿþ g q4àk( q4à4glink.s=ÿþ g €5k( €59glink.sBÿþ g 50k( 50>glink.sGÿþ g š5Xk( š5XCglink.sLÿþ g ª5€k( ª5€Hglink.sQÿþ g »5¨k( »5¨Mglink.sVÿþ g É5Ðk( É5ÐRglink.s[ÿþ g Ü5øk( Ü5øWglink.s`ÿþ g ë6 k( ë6 \glink.seÿþ g ú6Hk( ú6Haglink.sjÿþ g 6pk( 6pfglink.soÿþ g 6˜k( 6˜kglink.stÿþ g /6Àk( /6Àpglink.syÿþ g @6èk( @6èuglink.s~ÿþ g O7k( O7zglink.sƒÿþ g ^78k( ^78glink.sˆÿþ g o7`k( o7`„glink.sÿþ g {7ˆk( {7ˆ‰glink.s’ÿþ g ‰7°k( ‰7°Žglink.s—ÿþ g ˜7Øk( ˜7Ø“glink.sœÿþ g ¦8k( ¦8˜glink.s¡ÿþ g ±8(k( ±8(glink.s¦ÿþ g Á8Pk( Á8P¢glink.s«ÿþ g Ô8xk( Ô8x§glink.s°ÿþ g ã8 k( ã8 ¬glink.sµÿþ g ó8Èk( ó8ȱglink.sºÿþ g 8ðk( 8ð¶glink.s¿ÿþ g 9k( 9»glink.sÄÿþ g 9@k( 9@Àglink.sÉÿþ g 49hk( 49hÅglink.sÿÿÿÿÿþ g E9k( E9Ê S_system_configurationpcap_setfilterpcap_statspcap_open_livepcap_strerrorpcap_filenopcap_filepcap_minor_versionpcap_major_versionpcap_is_swappedpcap_snapshotpcap_datalinkpcap_geterrpcap_perrorpcap_nextpcap_dispatchpcap_looppcap_closepcap_lookupnetpcap_lookupdevpcap_compilepcap_dumppcap_dump_closepcap_dump_openpcap_open_offlinePL_markstack_maxPL_markstack_ptrPL_stack_basePL_stack_maxPL_stack_spPL_sv_undefPL_sv_yesPerl_croakPerl_do_openPerl_formPerl_gv_stashpvPerl_hv_fetchPerl_hv_storePerl_markstack_growPerl_mg_setPerl_newGVgenPerl_newHVPerl_newRVPerl_newSVivPerl_newSVpvPerl_newSVsvPerl_newXSPerl_safefreePerl_safemallocPerl_stack_growPerl_sv_2ivPerl_sv_2mortalPerl_sv_2pvPerl_sv_blessPerl_sv_derived_fromPerl_sv_freePerl_sv_newmortalPerl_sv_setivPerl_sv_setpvPerl_sv_setref_pvPerl_sv_setsvperl_call_svperl_get_svXS_Net__Pcap_lookupdevXS_Net__Pcap_lookupnetXS_Net__Pcap_open_liveXS_Net__Pcap_open_offlineXS_Net__Pcap_dump_openXS_Net__Pcap_loopXS_Net__Pcap_dispatchXS_Net__Pcap_closeXS_Net__Pcap_dump_closeXS_Net__Pcap_datalinkXS_Net__Pcap_snapshotXS_Net__Pcap_is_swappedXS_Net__Pcap_major_versionXS_Net__Pcap_minor_versionXS_Net__Pcap_geterrXS_Net__Pcap_strerrorXS_Net__Pcap_compileXS_Net__Pcap_setfilterXS_Net__Pcap_filenoXS_Net__Pcap_perrorXS_Net__Pcap_statsXS_Net__Pcap_fileXS_Net__Pcap_dumpXS_Net__Pcap_nextcallback_fncallback_wrapperFri Nov 26 11:01:10 1999 C for AIX Compiler Version 4.4.0.0 --- .boot_Net__Pcap.XS_Net__Pcap_next.XS_Net__Pcap_dump.XS_Net__Pcap_file.XS_Net__Pcap_stats.XS_Net__Pcap_perror.XS_Net__Pcap_fileno.XS_Net__Pcap_setfilter.XS_Net__Pcap_compile.XS_Net__Pcap_strerror.XS_Net__Pcap_geterr.XS_Net__Pcap_minor_version.XS_Net__Pcap_major_version.XS_Net__Pcap_is_swapped.XS_Net__Pcap_snapshot.XS_Net__Pcap_datalink.XS_Net__Pcap_dump_close.XS_Net__Pcap_close.XS_Net__Pcap_dispatch.XS_Net__Pcap_loop.XS_Net__Pcap_dump_open.XS_Net__Pcap_open_offline.XS_Net__Pcap_open_live.XS_Net__Pcap_lookupnet.XS_Net__Pcap_lookupdev.callback_wrapper.Perl_sv_2pv.Perl_form.perl_get_sv.Perl_croak.Perl_newXS.Perl_sv_derived_from.Perl_sv_2iv.pcap_next.Perl_newSViv.Perl_hv_store.Perl_newSVpv.Perl_mg_set.Perl_sv_2mortal.Perl_hv_fetch.pcap_dump.pcap_file.Perl_sv_newmortal.Perl_newGVgen.Perl_do_open.Perl_newRV.Perl_gv_stashpv.Perl_sv_bless.Perl_sv_setsv.pcap_stats.Perl_sv_setiv.pcap_perror.pcap_fileno.pcap_setfilter.Perl_safemalloc.pcap_compile.Perl_sv_setref_pv.pcap_strerror.Perl_sv_setpv.pcap_geterr.pcap_minor_version.pcap_major_version.pcap_is_swapped.pcap_snapshot.pcap_datalink.pcap_dump_close.pcap_close.Perl_newSVsv.pcap_dispatch.Perl_sv_free.pcap_loop.pcap_dump_open.pcap_open_offline.Perl_safefree.pcap_open_live.pcap_lookupnet.pcap_lookupdev.Perl_newHV.Perl_markstack_grow.Perl_stack_grow.perl_call_sv7ˆ kê\3³“$Ÿ„>8Ø48FC58./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.bsó/$ kêȶ“¤ÓŸ„>8ºD58ºD58p)Ó./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/.packlistó/¤/usr/local/lib/perl5/site_perl/5.005/aix/Net/Pcap.pm /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.bs /usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcap/Pcap.so /usr/local/man/man3/Net__Pcap.3 c.pc kêxoГ¤[Ÿ„>8ŒI58ŒI58pà‘[./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils/.packlistó/¤/usr/local/lib/perl5/site_perl/5.005/Net/PcapUtils.pm /usr/local/man/man3/Net__PcapUtils.3 ix/au kê¨#µ“$…!Ÿ„>8²tù6FC580.™…!./usr/local/lib/perl5/site_perl/5.005/aix/Net/Pcap.pmpUó/$# # Pcap.pm # # An interface to the LBL pcap(3) library. This module simply # bootstraps the extensions defined in Pcap.xs # # Copyright (c) 1999 Tim Potter. All rights reserved. This program is free # software; you can redistribute it and/or modify it under the same terms # as Perl itself. # # Comments/suggestions to tpot@acsys.anu.edu.au # # $Id: Pcap.pm,v 1.7 1999/03/24 23:26:42 tpot Exp $ # package Net::Pcap; require Exporter; require DynaLoader; use vars qw($VERSION @ISA); @ISA = qw(Exporter DynaLoader); @EXPORT = qw(); $VERSION = '0.03'; bootstrap Net::Pcap $VERSION; 1; # autoloaded methods go after the END token (&& pod) below __END__ =head1 NAME C - Interface to pcap(3) LBL packet capture library =head1 SYNOPSIS use Net::Pcap; =head1 DESCRIPTION C is a Perl binding to the LBL pcap(3) library, version 0.4. The README for libpcap describes itself as: "a system-independent interface for user-level packet capture. libpcap provides a portable framework for low-level network monitoring. Applications include network statistics collection, security monitoring, network debugging, etc." =head1 FUNCTIONS All functions defined by C are direct mappings to the libpcap functions. Consult the pcap(3) documentation and source code for more information. Arguments that change a parameter, for example Net::Pcap::lookupdev(), are passed that parameter as a reference. This is to retain compatibility with previous versions of Net::Pcap. =head2 Lookup functions =over =item B Returns the name of a network device that can be used with Net::Pcap::open_live() function. On error, the $err parameter is filled with an appropriate error message else it is undefined. =item B Determine the network number and netmask for the device specified in C<$dev>. The function returns 0 on success and sets the C<$net> and C<$mask> parameters with values. On failure it returns -1 and the C<$err> parameter is filled with an appropriate error message.z =head2 Packet capture functions =over =item B Returns a packet capture descriptor for looking at packets on the network. The $dev parameter specifies which network interface to capture packets from. The $snaplen and $promisc parameters specify the maximum number of bytes to capture from each packet, and whether to put the interface into promiscuous mode, respectively. The $to_ms parameter specifies a read timeout in ms. The packet descriptor will be undefined if an error occurs, and the $err parameter will be set with an appropriate error message. =item B Read $cnt packets from the packet capture descriptor $pcap_t and call the perl function &callback_fn with an argument of $user_data. If $cnt is negative, then the function loops forever or until an error occurs. The callback function is also passed packet header information and packet data like so: sub process_pkt { my($user_data, $hdr, $pkt) = @_; ... } The header information is a reference to a hash containing the following fields. =over =item * len The total length of the packet. =item * caplen The actual captured length of the packet data. This corresponds to the snapshot length parameter passed to Net::Pcap::open_live(). =item * tv_sec Seconds value of the packet timestamp. =item * tv_usec Microseconds value of the packet timestamp. =back =item B Return a packet capture descriptor to read from a previously created "savefile". The returned descriptor is undefined if there was an error and in this case the $err parameter will be filled. Savefiles are created using the Net::Pcap::dump_* commands. =item B Close the packet capture device associated with descriptor $pcap_t. =item B Collect $cnt packets and process them with callback function &callback_fn. if $cnt is -1, all packets currently buffered are processed. If $cnt is 0, process all packets until an error occurs. =item B Return the next available packet on the interface associated with packet descriptor $pcap_t. Into the %hdr hash is stored the received packet header. If not packet is available, the return value and header is undefined. =item B Compile the filter string contained in $filter_str and store it in $filter_t. A description of the filter language can be found in the libpcap source code, or the manual page for tcpdump(8) . The filter is optimized the filter if the $optimize variable is true. The netmask of the network device must be specified in the $netmask parameter. The function returns 0 if the compilation was successful, or -1 if there was a problem. =item B Associate the compiled filter stored in $filter_t with the packet capture descriptor $pcap_t. =back =head2 Savefile commands =over =item B Open a savefile for writing and return a descriptor for doing so. If $filename is "-" data is written to standard output. On error, the return value is undefined and Net::Pcap::geterr() can be used to retrieve the error text. =item B Dump the packet described by header %hdr and packet data $pkt to the savefile associated with $pcap_dumper_t. The packet header has the same format as that passed to the Net::Pcap::loop() callback. =item B Close the savefile associated with descriptor $pcap_dumper_t. =back =head2 Status functions =over =item B Returns the link layer type associated with the currently open device. =item B Returns the snapshot length (snaplen) specified in the call to Net::Pcap::open_live(). =item B This function returns true if the endianess of the currently open savefile is different from the endianess of the machine. =item B Return the major version number of the pcap library used to write the currently open savefile. =item B Return the minor version of the pcap library used to write the currently open savefile. =item B Returns a hash containing information about the status of packet capture device $pcap_t. The hash contains the following fields. =over =item * C The number of packets received by the packet capture software. =item * C The number of packets dropped by the packet capture software. =item * C The number of packets dropped by the network interface. =back =item B Return the filehandle associated with a savefile opened with Net::Pcap::open_offline(). =item B Return the file number of the network device opened with Net::Pcap::open_live(). =back =head2 Error handling =over =item B Return an error message for the last error associated with the packet capture device $pcap_t. =item B Return a string describing error number $errno. =item B Print the text of the last error associated with descriptor $pcap_t on standard error, prefixed by $prefix. =back =head1 LIMITATIONS The following limitations apply to this version of C. =over =item * The memory associated with filters created using Net::Pcap::compile() is not disposed of. =item * At present, only one callback function and user data scalar can be current at any time as they are both stored in global variables. =back =head1 EXAMPLES See the 't' directory of the C distribution for examples on using this module. =head1 COPYRIGHT Copyright (c) 1999 Tim Potter. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. =head1 SEE ALSO pcap(3), tcpdump(8) The source code for libpcap is available from ftp://ftp.ee.lbl.gov/libpcap.tar.Z =head1 AUTHOR Tim Potter Etpot@acsys.anu.edu.auE =cut # any real autoloaded methods go after this line vai kêÚΓ$Ü! „>8äµ 7ÍH580-˜Ü!./usr/local/lib/perl5/site_perl/5.005/Net/PcapUtils.pmUó/$# # Net::PcapUtils # # Some code to abstract away some of the messier parts of using the # Net::Pcap library. The idea is to be able to write "one-liner" type # scripts for packet capture without getting bogged down in the # initialisation code. # # Please send comments/suggestions to tpot@acsys.anu.edu.au # # $Id: PcapUtils.pm,v 1.5 1999/04/07 01:33:24 tpot Exp $ # package Net::PcapUtils; # # Copyright (c) 1995,1996,1997,1998,1999 ANU and CSIRO on behalf of # the participants in the CRC for Advanced Computational Systems # ('ACSys'). # # ACSys makes this software and all associated data and documentation # ('Software') available free of charge. You may make copies of the # Software but you must include all of this notice on any copy. # # The Software was developed for research purposes and ACSys does not # warrant that it is error free or fit for any purpose. ACSys # disclaims any liability for all claims, expenses, losses, damages # and costs any user may incur as a result of using, copying or # modifying the Software. # use strict; use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS); my $myclass; BEGIN { $myclass = __PACKAGE__; $VERSION = "0.01"; } sub Version () { "$myclass v$VERSION" } BEGIN { @ISA = qw(Exporter); # Items to export into callers namespace by default # (move infrequently used names to @EXPORT_OK below) @EXPORT = qw( ); # Other items we are prepared to export if requested @EXPORT_OK = qw( ); # Tags: %EXPORT_TAGS = ( ALL => [@EXPORT, @EXPORT_OK], ); } use Net::Pcap 0.03; # Not all functions implemented in previous Net::Pcap's # # Set up Net::Pcap to capture packets live from the wire, or play back # packets from a savefile. Call a Perl subroutine for each packet # received. # sub loop { my($callback, @rest) = @_; my($errbuf, $bpf_prog); # Default arguments my %args = ( SNAPLEN => 100, # Num bytes to capture from packet PROMISC => 1, # Operate in promiscuous mode? TIMEOUT => 1000, # Read timeout (ms) NUMPACKETS => -1, # Pkts to read (-1 = loop forever) FILTER => '', # Filter string USERDATA => '', # Passed as first arg to callback fn SAVEFILE => '', # Default save file DEV => '', # Network interface to open mode => '', # Internal variable @rest); # Get pcap device if not specified if ($args{DEV} eq '') { $args{DEV} = Net::Pcap::lookupdev(\$errbuf); return $errbuf, unless $args{DEV}; } # Get pcap network/netmask my($net, $mask); return $errbuf, if (Net::Pcap::lookupnet($args{DEV}, \$net, \$mask, \$errbuf) == -1); # # Open in specified mode # my $pcap_desc; if ($args{SAVEFILE} eq '') { # Open interface "live" $pcap_desc = Net::Pcap::open_live($args{DEV}, $args{SNAPLEN}, $args{PROMISC}, $args{TIMEOUT}, \$errbuf); return $errbuf, unless $pcap_desc; } else { # Open saved file $pcap_desc = Net::Pcap::open_offline($args{SAVEFILE}, \$errbuf); return $errbuf, unless $pcap_desc; } # Set up filter, if defined if ($args{FILTER} ne '') { return(Net::Pcap::geterr($pcap_desc)), if ((Net::Pcap::compile($pcap_desc, \$bpf_prog, $args{FILTER}, 0, $mask) == -1) || (Net::Pcap::setfilter($pcap_desc, $bpf_prog) == -1)); } # Start looping if ($args{mode} ne "setup") { # Call loop function my $result = Net::Pcap::loop($pcap_desc, $args{NUMPACKETS}, \&$callback, $args{USERDATA}); Net::Pcap::close($pcap_desc); if ($result == 0) { return ""; } else { return(Net::Pcap::geterr($pcap_desc)); } } else { # Just return the pcap descriptor is setup-only mode return $pcap_desc; } } # Open a live network interface or save file and return the pcap # descriptor. Takes the same arguments as Net::PcapUtils::loop() # function. sub open { return loop(undef, @_, mode => 'setup'); } # Return the next packet available on the specified packet capture # descriptor. sub next { my($pcap_t) = @_; my($pkt, %hdr); while(!($pkt = Net::Pcap::next($pcap_t, \%hdr))) { # No packet available } return ($pkt, %hdr); } # # Module initialisation # 1; # autoloaded methods go after the END token (&& pod) below __END__ =head1 NAME C - Utility routines for Net::Pcap module =head1 SYNOPSIS require Net::Pcap 0.03; use Net::PcapUtils; # Call function for all packets received Net::PcapUtils::loop(\&callbackfn, [optional args]); # Return the next packet available on the interface ($pkt, %hdr) = Net::PcapUtils::next($pcap_t); # Open a network device for processing $pcap_t = Net::PcapUtils::open([optional args]); =head1 DESCRIPTION Net::PcapUtils is a module to sit in front of Net::Pcap in order to hide some of the pcap(3) initialisation by providing sensible defaults. This enables a programmer to easily write small, specific scripts for a particular purpose without having to worry about too many details. The functions implemented in Net::PcapUtils are named after those in Net::Pcap. The B function sits in a loop and executes a callback for each packet received, while B retrieves the next packet from the network device, and B returns an opened packet descriptor suitable for use with other Net::Pcap routines. =head2 Functions =over =item B value]);> Given a callback function and a list of optional named parameterss, open a network interface, configure it, and execute the callback function for each packet received on the interface. If the SAVEFILE parameter is present, a saved file of that name will be opened for reading, else the network interface specified by the DEV parameter will be opened. If no saved file or device is specified, the interface returned by Net::Pcap::lookupdev() is opened. The optional arguments are those which are normally passed to the pcap_open_live() function from the pcap(3) library. Their defaults are given below. my %args = ( SNAPLEN => 100, # Num bytes to capture from packet PROMISC => 1, # Operate in promiscuous mode? TIMEOUT => 1000, # Read timeout (ms) NUMPACKETS => -1, # Pkts to read (-1 = loop forever) FILTER => '', # Filter string USERDATA => '', # Passed as first arg to callback fn SAVEFILE => '', # Default save file DEV => '', # Network interface to open ); Consult the documentation for the pcap(3) library for more details on the nature of these parameters. On error, this function returns an error string describing the error. An empty string is returned upon success. =item B value]);> Return a packet capture descriptor. The optional arguments passed to this function are the same as those which can be passed to Net::PcapUtils::loop(). If the open() command was successful, it returns a reference to a packet capture descriptor, else a string containing an error message. =item B Return the next packet available on the interface specified by packet capture descriptor $pcap_t. This may be obtained from the Net::PcapUtils::open() function, Net::Pcap::open_live() or Net::Pcap::open_offline(). =back =head1 EXAMPLE The following script prints a message for each IP packet received. #!/usr/bin/perl -w use strict; use Net::PcapUtils; sub process_pkt { print("packet\n"); } Net::PcapUtils::loop(\&process_pkt, FILTER => 'ip'); =head1 SEE ALSO The C module for XS bindings to the C library. The pcap library is available from ftp://ftp.ee.lbl.gov/libpcap.tar.Z =head1 COPYRIGHT Copyright (c) 1995,1996,1997,1998,1999 ANU and CSIRO on behalf of the participants in the CRC for Advanced Computational Systems ('ACSys'). ACSys makes this software and all associated data and documentation ('Software') available free of charge. You may make copies of the Software but you must include all of this notice on any copy. The Software was developed for research purposes and ACSys does not warrant that it is error free or fit for any purpose. ACSys disclaims any liability for all claims, expenses, losses, damages and costs any user may incur as a result of using, copying or modifying the Software. =head1 AUTHOR Tim Potter Etpot@acsys.anu.edu.auE =cut # any real autoloaded methods go after this line ion  kê~™™“¤¾ „>8òC58òC58pNŽ¾./usr/local/lib/Net-Pcap-0.03/t/leaktest6.plpUtó/¤#!/usr/bin/perl # # Test for memory leaks in stats() function # # $Id: leaktest6.pl,v 1.2 1999/03/14 03:14:10 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; die("Must run as root!\n"), if ($UID != 0); my($dev, $err, $pcap_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } my $count; sub process_pkt { my($user, $hdr, $pkt) = @_; my(%stats); $count++; Net::Pcap::stats($pcap_t, \%stats); print("$count\n"), if (($count % 1000) == 0); } Net::Pcap::loop($pcap_t, 0, \&process_pkt, "1234"); Net::Pcap::close($pcap_t); si kê@ š“¤ „>8òC58òC58`¨Ž./usr/local/lib/Net-Pcap-0.03/t/11-misc.tplpUtó/¤#!/usr/bin/perl # # Test misc functions # # $Id: 11-misc.t,v 1.3 1999/03/15 06:33:31 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..3\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err, $slen); # # Test snapshot # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $slen = Net::Pcap::snapshot($pcap_t); if ($slen != 1024) { print("bad snapshot len $slen\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); $pcap_t = Net::Pcap::open_live($dev, 2048, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err"); print("not ok\n"); exit; } $slen = Net::Pcap::snapshot($pcap_t); if ($slen != 2048) { print("bad snapshot len $slen\n"); print("not ok\n"); } else { print("ok\n"); } # # Test datalink function # my $dlt = Net::Pcap::datalink($pcap_t); print("Datalink is $dlt\n"); if (($dlt < 0) or !(defined($dlt))) { print("bad datalink type\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); k dev kê,6›“¤E „>8òC58òC58`ÈŽE./usr/local/lib/Net-Pcap-0.03/t/08-filter.tpUtó/¤#!/usr/bin/perl # # Test open_live functions # # $Id: 08-filter.t,v 1.5 1999/03/15 06:33:31 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..2\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err, $result, $net, $mask, $filter); # # Test filter compile function (& geterr incidentally) # $dev = Net::Pcap::lookupdev(\$err); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("\n"); exit; } $result = Net::Pcap::compile($pcap_t, \$filter, "tcp", 0, $mask); if ($result == -1) { print("Net::Pcap::compile returned ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); } else { print("ok\n"); } # # Test setfilter function # $result = Net::Pcap::setfilter($pcap_t, $filter); if ($result == -1) { print(Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); p_t kê|Aœ“¤J „>8òC58òC58`ÊŽJ./usr/local/lib/Net-Pcap-0.03/t/09-error.tpUtó/¤#!/usr/bin/perl # # Test open_live functions # # $Id: 09-error.t,v 1.5 1999/03/15 06:33:31 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..2\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err, $net, $mask); my($result, $filter); $dev = Net::Pcap::lookupdev(\$err); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err"); print("not ok\n"); exit; } $result = Net::Pcap::compile($pcap_t, \$filter, "beans and ham", 0, $mask); if ($result == 0) { print("Call to Net::Pcap::compile actually worked!"); print("not ok\n"); exit; } my($geterr, $strerror); $geterr = Net::Pcap::geterr($pcap_t); ($geterr eq "") ? print("not ok\n") : print("ok\n"); $strerror = Net::Pcap::strerror(1); ($strerror eq "") ? print("not ok\n") : print("ok\n"); # This test, if enabled, mucks up the test harness script #Net::Pcap::perror($pcap_t, "$0 test error"); print kê`“¤ÿ „>8òC58òC58`ÌŽÿ./usr/local/lib/Net-Pcap-0.03/t/13-dispatch.tUtó/¤#!/usr/bin/perl # # Test dispatch function # # $Id: 13-dispatch.t,v 1.3 1999/03/15 06:33:32 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err); # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 1, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "abc") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "abc"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } print("Received packet of len $hdr->{len}\n"); } Net::Pcap::dispatch($pcap_t, 10, \&process_pkt, "abc"); Net::Pcap::close($pcap_t); print("ok\n"); u kêÌŸž“¤Ä „>8òC58òC58`ÎŽÄ./usr/local/lib/Net-Pcap-0.03/t/07-stats.t.tUtó/¤#!/usr/bin/perl # # Test stats # # $Id: 07-stats.t,v 1.4 1999/03/15 06:33:30 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } my $count = 0; sub process_pkt { my($user, $hdr, $pkt) = @_; my %stats; print("In process_pkt:\n"); Net::Pcap::stats($pcap_t, \%stats); $count++; if ($count != $stats{ps_recv}) { print("Bad statistics\n"); print("not ok\n"); exit; } print("Received $stats{ps_recv}, dropped $stats{ps_drop}, ", "interface dropped $stats{ps_ifdrop}\n"); } Net::Pcap::loop($pcap_t, 10, \&process_pkt, 0); Net::Pcap::close($pcap_t); print("ok\n"); ss_p kê’ Ÿ“¤¿ „>8òC58òC58`Ä‹¿./usr/local/lib/Net-Pcap-0.03/t/05-dump.t.tUtó/¤#!/usr/bin/perl # # Test loop function # # $Id: 05-dump.t,v 1.5 1999/03/15 06:37:26 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); my($dev, $pcap_t, $pcap_dumper_t, $err); my $dumpfile = "/tmp/Net-Pcap-dump.$$"; # Must run as root if ($UID != 0) { print("not ok\n"); exit; } # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, $dumpfile); if (!defined($pcap_dumper_t)) { print("Net::Pcap::dump_open failed: ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } my($count) = 0; sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "xyz") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "xyz"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); $count++; } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "xyz"); Net::Pcap::close($pcap_t); Net::Pcap::dump_close($pcap_dumper_t); if (!-f $dumpfile) { print("No save file created\n"); print("not ok\n"); } else { print("ok\n"); } END { unlink($dumpfile); } v kêÞ “¤¦ „>8òC58òC58`Æ‹¦./usr/local/lib/Net-Pcap-0.03/t/02-lookup.ttUtó/¤#!/usr/bin/perl # # Test lookup functions # # $Id: 02-lookup.t,v 1.4 1999/03/15 06:33:29 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::Pcap; print("1..2\n"); my($dev, $net, $mask, $err); # # Test lookupdev() function # $dev = Net::Pcap::lookupdev(\$err); if ($dev eq "") { print("not ok\n"); } else { print("ok\n"); } if ($dev eq "") { print("Net::Pcap::lookupdev returned error $err\n"); print("not ok\n"); exit; } else { print("Net::Pcap::lookupdev returned device $dev\n"); } # # Test lookupnet() function # # From test.pl, Net-Pcap-0.01.tar.gz sub dotquad { my($na, $nb, $nc, $nd); my ( $net ) = @_ ; $na=$net >> 24 & 255 ; $nb=$net >> 16 & 255 ; $nc=$net >> 8 & 255 ; $nd=$net & 255 ; return ( "$na.$nb.$nc.$nd") ; } my($result); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); if ($result == -1) { print("not ok\n"); print("Net::Pcap::lookupnet returned error $err\n"); exit; } else { print("Net::Pcap::lookupnet returned net ", dotquad($net), " and mask ", dotquad($mask), "\n"); } if (($net == 0) or ($mask == 0)) { print("not ok\n"); } else { print("ok\n"); }  kêtg¡“¤²  „>8òC58òC58`² ./usr/local/lib/Net-Pcap-0.03/t/10-fileno.ttUtó/¤#!/usr/bin/perl # # Test loop function # # $Id: 10-fileno.t,v 1.5 1999/03/15 06:37:26 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..4\n"); my($dev, $pcap_t, $pcap_dumper_t, $err); my $dumpfile = "/tmp/Net-Pcap-dump.$$"; # Must run as root if ($UID != 0) { print("not ok\n"); exit; } # # Test file and fileno on offline interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, $dumpfile); if (!defined($pcap_dumper_t)) { print("Net::Pcap::dump_open failed: ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "xyz") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "xyz"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "xyz"); Net::Pcap::close($pcap_t); Net::Pcap::dump_close($pcap_dumper_t); $pcap_t = Net::Pcap::open_offline($dumpfile, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_offline returned error $err\n"); print("not ok\n"); exit; } my($fh, $fileno); $fh = Net::Pcap::file($pcap_t); $fileno = Net::Pcap::fileno($pcap_t); if (!defined($fh)) { print("bad file handle returned by Net::Pcap::file\n"); print("not ok\n"); } else { print("ok\n"); } if ($fileno != -1) { print("Bad fileno returned by Net::Pcap::fileno\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); # # Test file and fileno on live connection # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } $fh = Net::Pcap::file($pcap_t); $fileno = Net::Pcap::fileno($pcap_t); if (defined($fh)) { print("bad file handle returned by Net::Pcap::file\n"); print("not ok\n"); } else { print("ok\n"); } if ($fileno < 0) { print("Bad fileno returned by Net::Pcap::fileno\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); END { unlink($dumpfile); } # Def kêRp¢“¤Š „>8òC58òC58`Š./usr/local/lib/Net-Pcap-0.03/t/04-loop.tttUtó/¤#!/usr/bin/perl # # Test loop function # # $Id: 04-loop.t,v 1.5 1999/03/15 06:33:29 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); # Must run as root if ($UID != 0) { print("must run as root!\n"); print("not ok\n"); exit; } my($dev, $pcap_t, $err); # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } my $count = 0; sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "abc") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "abc"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } print("Received packet of len $hdr->{len}\n"); $count++; } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "abc"); if ($count != 10) { print("Bad pkt count\n"); print("not ok\n"); exit; } Net::Pcap::close($pcap_t); print("ok\n"); umper_ kê࣓¤X „>8òC58òC58pOŽX./usr/local/lib/Net-Pcap-0.03/t/README.ó/¤Most of these tests are required to be run as root. Note that some of these tests require a working network interface with actual traffic on it. For example the loop test waits for 10 packets to be received on the network before exiting. If there is no traffic on the interface, this test will block. The memory leak tests do not complete.  kê,p¤“¤X „>8òC58òC58`NX./usr/local/lib/Net-Pcap-0.03/t/12-next.tttUtó/¤#!/usr/bin/perl # # Test next function # # $Id: 12-next.t,v 1.5 1999/03/15 06:33:32 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err, $net, $mask, $result, $filter); # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 1, \$err); # From test.pl, Net-Pcap-0.01.tar.gz print( "dev is ", $dev, ", net is ", $net, ", mask is ", $mask. "\n"); sub dotquad { my($na, $nb, $nc, $nd); my ( $net ) = @_ ; $na=$net >> 24 & 255 ; $nb=$net >> 16 & 255 ; $nc=$net >> 8 & 255 ; $nd=$net & 255 ; return ( "$na.$nb.$nc.$nd") ; } print ("net is ", dotquad($net), " mask is ", dotquad($mask), "\n"); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $result = Net::Pcap::compile($pcap_t, \$filter, "ip", 0, $mask); if ($result == -1) { print("Net::Pcap::compile returned ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } $result = Net::Pcap::setfilter($pcap_t, $filter); if ($result == -1) { print("Net::Pcap::setfilter returned ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } for my $count (1..10) { my($pkt, %hdr); while (!($pkt = Net::Pcap::next($pcap_t, \%hdr))) { print("no pkt received (but that's OK)\n"); } if (!defined(%hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("header is not defined\n"), if (!defined(%hdr)); print("packet is not defined\n"), if (!defined($pkt)); print("not ok\n"); exit; } print("$count: received packet of len $hdr{len}\n"); } Net::Pcap::close($pcap_t); print("ok\n");  kêL©¥“¤. „>8òC58òC58pªŽ../usr/local/lib/Net-Pcap-0.03/t/03-openlive.tUtó/¤#!/usr/bin/perl # # Test open_live functions # # $Id: 03-openlive.t,v 1.4 1999/03/15 06:33:29 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..3\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err); # # Test open_live function # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err on device $dev\n"); print("not ok\n"); exit; } print("ok\n"); # # Test close function # Net::Pcap::close($pcap_t); print("ok\n"); # # Test open_live() with dodgy device # $pcap_t = Net::Pcap::open_live("beans", 1024, 1, 0, \$err); if (defined($pcap_t)) { print("not ok\n"); } else { print("ok\n"); } } k굦“¤­ „>8òC58òC58pòŽ­./usr/local/lib/Net-Pcap-0.03/t/01-module.ttUtó/¤#!/usr/bin/perl # # Test module import # # $Id: 01-module.t,v 1.1 1999/03/10 02:48:40 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::Pcap; print("1..1\nok\n"); pri kê`’§“¤à¡„>8òC58òC58`Pà./usr/local/lib/Net-Pcap-0.03/t/leaktest1.plUtó/¤#!/usr/bin/perl # # Test for memory leaks by sitting in an infinite loop and flood # pinging from another window. Memory leaks become apparent quickly. # # $Id: leaktest1.pl,v 1.2 1999/03/14 03:14:09 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; die("Must run as root!\n"), if ($UID != 0); my($dev, $err, $pcap_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } my $count; sub process_pkt { my($user, $hdr, $pkt) = @_; $count++; print("$count\n"), if (($count % 1000) == 0); } Net::Pcap::loop($pcap_t, 0, \&process_pkt, "1234"); Net::Pcap::close($pcap_t);  kêþv¨“¤ ¡„>8óC58óC58P ./usr/local/lib/Net-Pcap-0.03/t/06-offline.tUtó/¤#!/usr/bin/perl # # Test open_offline # # $Id: 06-offline.t,v 1.6 1999/03/15 06:37:26 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..4\n"); my($pcap_t, $err); my $dumpfile = "/tmp/Net-Pcap-dump.$$"; # Must run as root if ($UID != 0) { print("not ok\n"); exit; } # # Test open_offline of bad file (not created yet) # $pcap_t = Net::Pcap::open_offline($dumpfile, \$err); if (defined($pcap_t)) { print("Net::Pcap::open_offline worked for dummy file\n"); print("not ok\n"); } else { print("ok\n"); } # # Test open_offline of good file. Need to create it first. # my($dev, $pcap_dumper_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, $dumpfile); if (!defined($pcap_dumper_t)) { print("Net::Pcap::dump_open failed: ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "xyz") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "xyz"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "xyz"); Net::Pcap::close($pcap_t); Net::Pcap::dump_close($pcap_dumper_t); if (!-f $dumpfile) { print("No save file created\n"); print("not ok\n"); } else { print("ok\n"); } $pcap_t = Net::Pcap::open_offline($dumpfile, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_offline failed: $err\n"); print("not ok\n"); exit; } my($major, $minor, $swapped); $major = Net::Pcap::major_version($pcap_t); $minor = Net::Pcap::minor_version($pcap_t); $swapped = Net::Pcap::is_swapped($pcap_t); print("File saved with libpcap version $major.$minor, swap is $swapped\n"); if ($major == 0) { print("suspicious libpcap major version\n"); print("not ok\n"); } else { print("ok\n"); } my $count = 0; sub process_pkt2 { my($user, $hdr, $pkt) = @_; if (($user ne "123") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback2\n"); print("Bad user data\n"), if ($user ne "123"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } print("Received packet of len $hdr->{len}\n"); $count++; } Net::Pcap::loop($pcap_t, 10, \&process_pkt2, "123"); Net::Pcap::close($pcap_t); if ($count != 10) { print("not ok\n"); } else { print("ok\n"); } END { unlink($dumpfile); } gt> kê@º“¤Y¡„>8óC58óC58p"‰Y./usr/local/lib/Net-Pcap-0.03/t/leaktest2.plUtó/¤#!/usr/bin/perl # # Test for memory leaks in lookup functions # # $Id: leaktest2.pl,v 1.2 1999/03/14 03:14:10 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; my($dev, $net, $mask, $err, $result); while(1) { $dev = Net::Pcap::lookupdev(\$err); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); } file (n kê0O»“¤¡„>8óC58óC58p1Ž./usr/local/lib/Net-Pcap-0.03/t/leaktest3.plUtó/¤#!/usr/bin/perl # # Test for memory leaks in dispatch() function. # # $Id: leaktest3.pl,v 1.2 1999/03/14 03:14:10 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; die("Must run as root!\n"), if ($UID != 0); my($dev, $err, $pcap_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } my $count; sub process_pkt { my($user, $hdr, $pkt) = @_; $count++; print("$count\n"), if (($count % 1000) == 0); } while(1) { Net::Pcap::dispatch($pcap_t, 0, \&process_pkt, "1234"); } Net::Pcap::close($pcap_t); Pca kêæ ¼“¤*¡„>8óC58óC58` *./usr/local/lib/Net-Pcap-0.03/t/leaktest4.plUtó/¤#!/usr/bin/perl # # Test for memory leaks in dump() function # # $Id: leaktest4.pl,v 1.2 1999/03/14 03:14:10 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; die("Must run as root!\n"), if ($UID != 0); my($dev, $err, $pcap_t, $pcap_dumper_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, "/dev/null"); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } my $count; sub process_pkt { my($user, $hdr, $pkt) = @_; $count++; Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); print("$count\n"), if (($count % 1000) == 0); } Net::Pcap::loop($pcap_t, 0, \&process_pkt, "1234"); Net::Pcap::dump_close($pcap_dumper_t); Net::Pcap::close($pcap_t); turned kêŽ$½“¤²¡„>8óC58óC58`²./usr/local/lib/Net-Pcap-0.03/t/leaktest5.plUtó/¤#!/usr/bin/perl # # Test for memory leaks in next() function. # # $Id: leaktest5.pl,v 1.2 1999/03/14 03:14:10 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; die("Must run as root!\n"), if ($UID != 0); my($dev, $err, $pcap_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } my $count; while(1) { my($pkt, %hdr); while (!($pkt = Net::Pcap::next($pcap_t, \%hdr))) { } $count++; print("$count\n"), if (($count % 1000) == 0); } Net::Pcap::loop($pcap_t, 0, \&process_pkt, "1234"); Net::Pcap::close($pcap_t); Net:: kê´V““¤H¡„>8ÖC58ÖC58pMŽH./usr/local/lib/Net-Pcap-0.03/MANIFESTtó/¤README MANIFEST Makefile.PL Pcap.pm Pcap.xs typemap t/README t/01-module.t t/02-lookup.t t/03-openlive.t t/04-loop.t t/05-dump.t t/06-offline.t t/07-stats.t t/08-filter.t t/09-error.t t/10-fileno.t t/11-misc.t t/12-next.t t/13-dispatch.t t/leaktest1.pl t/leaktest2.pl t/leaktest3.pl t/leaktest4.pl t/leaktest5.pl t/leaktest6.pl kên?˜“$l¡„>8ÖC58ÖC58P.Žl./usr/local/lib/Net-Pcap-0.03/READMETtó/$README for Net::Pcap 0.03 ========================= The Net::Pcap module is a Perl binding to the LBL pcap(3) packet capture library. It is a re-implementation of Peter Lister's original Net::Pcap version 0.01. Net::Pcap version 0.03 contains the following improvements over previous versions: - all pcap library functions fully implemented - packet header and statistical information passed as perl hashes - POD documentation The source code for the LBL pcap library can be found at ftp://ftp.ee.lbl.gov/libpcap.tar.Z. If you're running Linux, there should be a packaged up version of libpcap available for your system. Check the nearest mirror site of your favourite distribution. Installation Notes ================== If your pcap header files are installed somewhere strange, create the Makefile using the INC and/or LIBS option. $ perl Makefile.PL INC=-I/usr/local/include/pcap \ LIBS='-L/usr/lib/pcap -lpcap' Compile the extension as per usual: $ make $ make test To install the extension, as root type: # make install A ANSI-compliant compiler is required to compile the extension. For most of the tests, root access is required since opening a network interface in promiscuous mode is a privileged operation. Some tests also require a working network interface with traffic on it. Consult the source for individual tests for more information. Net::Pcap has been tested on the following systems, but is likely to run on many more. - Solaris 2.6, gcc 2.8.1 - Linux 2.2, gcc 2.8.1 Miscellaneous ============= The original version of Net::Pcap, version 0.01, was written by Peter Lister . Version 0.02 was created by Bo Adler and not uploaded to CPAN. It can be found at: http://www.buttsoft.com/~thumper/software/perl/Net-Pcap/ Thanks to David N. Blank-Edelman for testing and general polishing up of this version of Net::Pcap. Copyright (c) 1999 Tim Potter. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. 25/3/99 Tim Potter tpot@acsys.anu.edu.au ion\ kê>åÒ“¤¡¡„>8¬I58¬I58`á‘¡./usr/local/lib/Net-PcapUtils-0.01/READMEplUtó/¤README for Net::PcapUtils 0.01 ============================== This module provides some code to abstract away some of the messier parts of using the Net::Pcap library. The idea is to be able to write "one-liner" type scripts for packet capture without getting bogged down in the initialisation code. This makes it possible to write very compact Perl scripts involving packet capture. To use Net::PcapUtils, the latest version of the Net::Pcap module is required (at the time of writing, this was version 0.03). Net::PcapUtils provides three functions that are described below: - Net::PcapUtils::loop(\&callback_fn, [optional args]); Capture packets and execute callback function for evey packet received. - Net::PcapUtils::next($pcap_t); Return the next packet and packet header from an open network interface. - Net::PcapUtils::open([optional args]); Open a network interface for packet capture and return a packet capture descriptor. If none of the optional arguments are declared, then a reasonable set of defaults are assumed. See the Net::PcapUtils manpage for more details. I hope you enjoy Net::PcapUtils. 8/4/99 Tim Potter tpot@acsys.anu.edu.au work in kêTÕ“¤>¡„>8¬I58¬I58pã‘>./usr/local/lib/Net-PcapUtils-0.01/t/03-next.ttó/¤#!/usr/bin/perl -w # # Test Net::PcapUtils::next() function # # $Id: 03-next.t,v 1.1 1999/04/07 01:23:21 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::PcapUtils; print("1..2\n"); my $pcap_t = Net::PcapUtils::open(); if (!ref($pcap_t)) { print("$pcap_t\nnot ok\n"); exit; } print("ok\n"); my($pkt, %hdr); my $count = 0; while(($pkt, %hdr) = Net::PcapUtils::next($pcap_t)) { use Data::Dumper; print("packet $count: "); print Dumper %hdr; $count++; last, if ($count == 25); } ($count == 25) ? print("ok\n") : print("not ok\n"); b k꺬Ö“¤ì¡„>8¬I58¬I58p(’ì./usr/local/lib/Net-PcapUtils-0.01/t/01-loop.ttó/¤#!/usr/bin/perl -w # # Test Net::PcapUtils::loop() function # # $Id: 01-loop.t,v 1.1 1999/04/07 01:23:20 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::PcapUtils; print("1..1\n"); my $count = 0; sub process_pkt { my $pkt = $_[1]; print("packet\n"); exit, if ($count++ > 20); } my $result = Net::PcapUtils::loop(\&process_pkt); if (!$result eq "") { print("$result\n"); } END { if ($count > 20) { print("ok\n"); } else { print("not ok\n"); } } la kê:°ד¤H¡„>8¬I58¬I58p)’H./usr/local/lib/Net-PcapUtils-0.01/t/02-open.ttó/¤#!/usr/bin/perl -w # # Test Net::PcapUtils::open() function # # $Id: 02-open.t,v 1.1 1999/04/07 01:23:20 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::Pcap; use Net::PcapUtils; print("1..1\n"); my $pcap_t = Net::PcapUtils::open(); if (!ref($pcap_t)) { print("$pcap_t\nnot ok\n"); exit; } print("ok\n"); kê,‹¹“$ý8¡„>8Ù48¢C580’šý8./usr/local/man/man3/Net__Pcap.31/t/02-ó/$.rn '' }` ''' $RCSfile$$Revision$$Date$ ''' ''' $Log$ ''' .de Sh .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp .if t .sp .5v .if n .sp .. .de Ip .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .de Vb .ft CW .nf .ne \\$1 .. .de Ve .ft R .fi .. ''' ''' ''' Set up \*(-- to give an unbreakable dash; ''' string Tr holds user defined translation string. ''' Bell System Logo is used as a dummy character. ''' .tr \(*W-|\(bv\*(Tr .ie n \{\ .ds -- \(*W- .ds PI pi .if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch .if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch .ds L" "" .ds R" "" ''' \*(M", \*(S", \*(N" and \*(T" are the equivalent of ''' \*(L" and \*(R", except that they are used on ".xx" lines, ''' such as .IP and .SH, which do another additional levels of ''' double-quote interpretation .ds M" """ .ds S" """ .ds N" """"" .ds T" """"" .ds L' ' .ds R' ' .ds M' ' .ds S' ' .ds N' ' .ds T' ' 'br\} .el\{\ .ds -- \(em\| .tr \*(Tr .ds L" `` .ds R" '' .ds M" `` .ds S" '' .ds N" `` .ds T" '' .ds L' ` .ds R' ' .ds M' ` .ds S' ' .ds N' ` .ds T' ' .ds PI \(*p 'br\} .\" If the F register is turned on, we'll generate .\" index entries out stderr for the following things: .\" TH Title .\" SH Header .\" Sh Subsection .\" Ip Item .\" X<> Xref (embedded .\" Of course, you have to process the output yourself .\" in some meaninful fashion. .if \nF \{ .de IX .tm Index:\\$1\t\\n%\t"\\$2" .. .nr % 0 .rr F .\} .TH Pcap 3 "perl 5.005, patch 03" "25/Mar/1999" "User Contributed Perl Documentation" .UC .if n .hy 0 .if n .na .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .de CQ \" put $1 in typewriter font .ft CW 'if n "\c 'if t \\&\\$1\c 'if n \\&\\$1\c 'if n \&" \\&\\$2 \\$3 \\$4 \\$5 \\$6 \\$7 '.ft R .. .\" @(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2 . \" AM - accent mark definitions .bd B 3 . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds ? ? . ds ! ! . ds / . ds q .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds ? \s-2c\h'-\w'c'u*7/10'\u\h'\*(#H'\zi\d\s+2\h'\w'c'u*8/10' . ds ! \s-2\(or\s+2\h'-\w'\(or'u'\v'-.8m'.\v'.8m' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' . ds q o\h'-\w'o'u*8/10'\s-4\v'.4m'\z\(*i\v'-.4m'\s+4\h'\w'o'u*8/10' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds v \\k:\h'-(\\n(.wu*9/10-\*(#H)'\v'-\*(#V'\*(#[\s-4v\s0\v'\*(#V'\h'|\\n:u'\*(#] .ds _ \\k:\h'-(\\n(.wu*9/10-\*(#H+(\*(#F*2/3))'\v'-.4m'\z\(hy\v'.4m'\h'|\\n:u' .ds . \\k:\h'-(\\n(.wu*8/10)'\v'\*(#V*4/10'\z.\v'-\*(#V*4/10'\h'|\\n:u' .ds 3 \*(#[\v'.2m'\s-2\&3\s0\v'-.2m'\*(#] .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E .ds oe o\h'-(\w'o'u*4/10)'e .ds Oe O\h'-(\w'O'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds v \h'-1'\o'\(aa\(ga' . ds _ \h'-1'^ . ds . \h'-1'. . ds 3 3 . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE . ds oe oe . ds Oe OE .\} .rm #[ #] #H #V #F C .SH "NAME" \f(CWNet::Pcap\fR \- Interface to \fIpcap\fR\|(3) LBL packet capture library .SH "SYNOPSIS" .PP .Vb 1 \& use Net::Pcap; .Ve .SH "DESCRIPTION" \f(CWNet::Pcap\fR is a Perl binding to the LBL \fIpcap\fR\|(3) library, version 0.4. The README for libpcap describes itself as: .PP .Vb 4 \& "a system-independent interface for user-level packet capture. \& libpcap provides a portable framework for low-level network \& monitoring. Applications include network statistics collection, \& security monitoring, network debugging, etc." .Ve .SH "FUNCTIONS" All functions defined by \f(CWNet::Pcap\fR are direct mappings to the libpcap functions. Consult the \fIpcap\fR\|(3) documentation and source code for more information. .PP Arguments that change a parameter, for example \fINet::Pcap::lookupdev()\fR, are passed that parameter as a reference. This is to retain compatibility with previous versions of Net::Pcap. .Sh "Lookup functions" .Ip "\fBNet::Pcap::lookupdev(\e$err);\fR" 5 Returns the name of a network device that can be used with \fINet::Pcap::open_live()\fR function. On error, the \f(CW$err\fR parameter is filled with an appropriate error message else it is undefined. .Ip "\fBNet::Pcap::lookupnet($dev, \e$net, \e$mask, \e$err);\fR" 5 Determine the network number and netmask for the device specified in \f(CW$dev\fR. The function returns 0 on success and sets the \f(CW$net\fR and \f(CW$mask\fR parameters with values. On failure it returns \-1 and the \f(CW$err\fR parameter is filled with an appropriate error message.z .Sh "Packet capture functions" .Ip "\fBNet::Pcap::open_live($dev, $snaplen, $promisc, $to_ms, \e$err);\fR" 10 Returns a packet capture descriptor for looking at packets on the network. The \f(CW$dev\fR parameter specifies which network interface to capture packets from. The \f(CW$snaplen\fR and \f(CW$promisc\fR parameters specify the maximum number of bytes to capture from each packet, and whether to put the interface into promiscuous mode, respectively. The \f(CW$to_ms\fR parameter specifies a read timeout in ms. The packet descriptor will be undefined if an error occurs, and the \f(CW$err\fR parameter will be set with an appropriate error message. .Ip "\fBNet::Pcap::loop($pcap_t, $cnt, \e&callback_fn, $user_data);\fR" 10 Read \f(CW$cnt\fR packets from the packet capture descriptor \f(CW$pcap_t\fR and call the perl function &callback_fn with an argument of \f(CW$user_data\fR. If \f(CW$cnt\fR is negative, then the function loops forever or until an error occurs. .Sp The callback function is also passed packet header information and packet data like so: .Sp .Vb 2 \& sub process_pkt { \& my($user_data, $hdr, $pkt) = @_; .Ve .Vb 2 \& ... \& } .Ve The header information is a reference to a hash containing the following fields. .Ip "\(bu len" 15 The total length of the packet. .Ip "\(bu caplen" 15 The actual captured length of the packet data. This corresponds to the snapshot length parameter passed to \fINet::Pcap::open_live()\fR. .Ip "\(bu tv_sec" 15 Seconds value of the packet timestamp. .Ip "\(bu tv_usec" 15 Microseconds value of the packet timestamp. .Ip "\fBNet::Pcap::open_offline($filename, \e$err);\fR" 10 Return a packet capture descriptor to read from a previously created \*(L"savefile\*(R". The returned descriptor is undefined if there was an error and in this case the \f(CW$err\fR parameter will be filled. Savefiles are created using the Net::Pcap::dump_* commands. .Ip "\fBNet::Pcap::close($pcap_t);\fR" 10 Close the packet capture device associated with descriptor \f(CW$pcap_t\fR. .Ip "\fBNet::Pcap::dispatch($pcap_t, $cnt, \e&callback_fn, $user_data);\fR" 10 Collect \f(CW$cnt\fR packets and process them with callback function &callback_fn. if \f(CW$cnt\fR is \-1, all packets currently buffered are processed. If \f(CW$cnt\fR is 0, process all packets until an error occurs. .Ip "\fBNet::Pcap::next($pcap_t, \e%hdr);\fR" 10 Return the next available packet on the interface associated with packet descriptor \f(CW$pcap_t\fR. Into the \f(CW%hdr\fR hash is stored the received packet header. If not packet is available, the return value and header is undefined. .Ip "\fBNet::Pcap::compile($pcap_t, \e$filter_t, $filter_str, $optimize, $netmask);\fR" 10 Compile the filter string contained in \f(CW$filter_str\fR and store it in \f(CW$filter_t\fR. A description of the filter language can be found in the libpcap source code, or the manual page for \fItcpdump\fR\|(8) . The filter is optimized the filter if the \f(CW$optimize\fR variable is true. The netmask of the network device must be specified in the \f(CW$netmask\fR parameter. The function returns 0 if the compilation was successful, or \-1 if there was a problem. .Ip "\fBNet::Pcap::setfilter($pcap_t, $filter_t);\fR" 10 Associate the compiled filter stored in \f(CW$filter_t\fR with the packet capture descriptor \f(CW$pcap_t\fR. .Sh "Savefile commands" .Ip "\fBNet::Pcap::dump_open($pcap_t, $filename);\fR" 10 Open a savefile for writing and return a descriptor for doing so. If \f(CW$filename\fR is \*(L"\-\*(R" data is written to standard output. On error, the return value is undefined and \fINet::Pcap::geterr()\fR can be used to retrieve the error text. .Ip "\fBNet::Pcap::dump($pcap_dumper_t, \e%hdr, $pkt);\fR" 10 Dump the packet described by header \f(CW%hdr\fR and packet data \f(CW$pkt\fR to the savefile associated with \f(CW$pcap_dumper_t\fR. The packet header has the same format as that passed to the \fINet::Pcap::loop()\fR callback. .Ip "\fBNet::Pcap::dump_close($pcap_dumper_t);\fR" 10 Close the savefile associated with descriptor \f(CW$pcap_dumper_t\fR. .Sh "Status functions" .Ip "\fBNet::Pcap::datalink($pcap_t);\fR" 10 Returns the link layer type associated with the currently open device. .Ip "\fBNet::Pcap::snapshot($pcap_t);\fR" 10 Returns the snapshot length (snaplen) specified in the call to \fINet::Pcap::open_live()\fR. .Ip "\fBNet::Pcap::is_swapped($pcap_t);\fR" 10 This function returns true if the endianess of the currently open savefile is different from the endianess of the machine. .Ip "\fBNet::Pcap::major_version($pcap_t);\fR" 10 Return the major version number of the pcap library used to write the currently open savefile. .Ip "\fBNet::Pcap::minor_version($pcap_t);\fR" 10 Return the minor version of the pcap library used to write the currently open savefile. .Ip "\fBNet::Pcap::stats($pcap_t, \e%stats);\fR" 10 Returns a hash containing information about the status of packet capture device \f(CW$pcap_t\fR. The hash contains the following fields. .Ip "\(bu \f(CWps_recv\fR" 15 The number of packets received by the packet capture software. .Ip "\(bu \f(CWps_drop\fR" 15 The number of packets dropped by the packet capture software. .Ip "\(bu \f(CWps_ifdrop\fR" 15 The number of packets dropped by the network interface. .Ip "\fBNet::Pcap::file($pcap_t);\fR" 10 Return the filehandle associated with a savefile opened with \fINet::Pcap::open_offline()\fR. .Ip "\fBNet::Pcap::fileno($pcap_t);\fR" 10 Return the file number of the network device opened with \fINet::Pcap::open_live()\fR. .Sh "Error handling" .Ip "\fBNet::Pcap::geterr($pcap_t);\fR" 10 Return an error message for the last error associated with the packet capture device \f(CW$pcap_t\fR. .Ip "\fBNet::Pcap::strerror($errno);\fR" 10 Return a string describing error number \f(CW$errno\fR. .Ip "\fBNet::Pcap::perror($pcap_t, $prefix);\fR" 10 Print the text of the last error associated with descriptor \f(CW$pcap_t\fR on standard error, prefixed by \f(CW$prefix\fR. .SH "LIMITATIONS" The following limitations apply to this version of \f(CWNet::Pcap\fR. .Ip "\(bu" 10 The memory associated with filters created using \fINet::Pcap::compile()\fR is not disposed of. .Ip "\(bu" 10 At present, only one callback function and user data scalar can be current at any time as they are both stored in global variables. .SH "EXAMPLES" See the \*(L't\*(R' directory of the \f(CWNet::Pcap\fR distribution for examples on using this module. .SH "COPYRIGHT" Copyright (c) 1999 Tim Potter. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. .SH "SEE ALSO" \fIpcap\fR\|(3), \fItcpdump\fR\|(8) .Sp The source code for libpcap is available from ftp://ftp.ee.lbl.gov/libpcap.tar.Z .SH "AUTHOR" Tim Potter .rn }` '' .IX Title "Pcap 3" .IX Name "C - Interface to pcap(3) LBL packet capture library" .IX Header "NAME" .IX Header "SYNOPSIS" .IX Header "DESCRIPTION" .IX Header "FUNCTIONS" .IX Subsection "Lookup functions" .IX Item "\fBNet::Pcap::lookupdev(\e$err);\fR" .IX Item "\fBNet::Pcap::lookupnet($dev, \e$net, \e$mask, \e$err);\fR" .IX Subsection "Packet capture functions" .IX Item "\fBNet::Pcap::open_live($dev, $snaplen, $promisc, $to_ms, \e$err);\fR" .IX Item "\fBNet::Pcap::loop($pcap_t, $cnt, \e&callback_fn, $user_data);\fR" .IX Item "\(bu len" .IX Item "\(bu caplen" .IX Item "\(bu tv_sec" .IX Item "\(bu tv_usec" .IX Item "\fBNet::Pcap::open_offline($filename, \e$err);\fR" .IX Item "\fBNet::Pcap::close($pcap_t);\fR" .IX Item "\fBNet::Pcap::dispatch($pcap_t, $cnt, \e&callback_fn, $user_data);\fR" .IX Item "\fBNet::Pcap::next($pcap_t, \e%hdr);\fR" .IX Item "\fBNet::Pcap::compile($pcap_t, \e$filter_t, $filter_str, $optimize, $netmask);\fR" .IX Item "\fBNet::Pcap::setfilter($pcap_t, $filter_t);\fR" .IX Subsection "Savefile commands" .IX Item "\fBNet::Pcap::dump_open($pcap_t, $filename);\fR" .IX Item "\fBNet::Pcap::dump($pcap_dumper_t, \e%hdr, $pkt);\fR" .IX Item "\fBNet::Pcap::dump_close($pcap_dumper_t);\fR" .IX Subsection "Status functions" .IX Item "\fBNet::Pcap::datalink($pcap_t);\fR" .IX Item "\fBNet::Pcap::snapshot($pcap_t);\fR" .IX Item "\fBNet::Pcap::is_swapped($pcap_t);\fR" .IX Item "\fBNet::Pcap::major_version($pcap_t);\fR" .IX Item "\fBNet::Pcap::minor_version($pcap_t);\fR" .IX Item "\fBNet::Pcap::stats($pcap_t, \e%stats);\fR" .IX Item "\(bu \f(CWps_recv\fR" .IX Item "\(bu \f(CWps_drop\fR" .IX Item "\(bu \f(CWps_ifdrop\fR" .IX Item "\fBNet::Pcap::file($pcap_t);\fR" .IX Item "\fBNet::Pcap::fileno($pcap_t);\fR" .IX Subsection "Error handling" .IX Item "\fBNet::Pcap::geterr($pcap_t);\fR" .IX Item "\fBNet::Pcap::strerror($errno);\fR" .IX Item "\fBNet::Pcap::perror($pcap_t, $prefix);\fR" .IX Header "LIMITATIONS" .IX Item "\(bu" .IX Item "\(bu" .IX Header "EXAMPLES" .IX Header "COPYRIGHT" .IX Header "SEE ALSO" .IX Header "AUTHOR" s($ kêÎbÔ“$™#¡„>8.F58*I580`œ™#./usr/local/man/man3/Net__PcapUtils.32-ó/$.rn '' }` ''' $RCSfile$$Revision$$Date$ ''' ''' $Log$ ''' .de Sh .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp .if t .sp .5v .if n .sp .. .de Ip .br .ie \\n(.$>=3 .ne \\$3 .el .ne 3 .IP "\\$1" \\$2 .. .de Vb .ft CW .nf .ne \\$1 .. .de Ve .ft R .fi .. ''' ''' ''' Set up \*(-- to give an unbreakable dash; ''' string Tr holds user defined translation string. ''' Bell System Logo is used as a dummy character. ''' .tr \(*W-|\(bv\*(Tr .ie n \{\ .ds -- \(*W- .ds PI pi .if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch .if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch .ds L" "" .ds R" "" ''' \*(M", \*(S", \*(N" and \*(T" are the equivalent of ''' \*(L" and \*(R", except that they are used on ".xx" lines, ''' such as .IP and .SH, which do another additional levels of ''' double-quote interpretation .ds M" """ .ds S" """ .ds N" """"" .ds T" """"" .ds L' ' .ds R' ' .ds M' ' .ds S' ' .ds N' ' .ds T' ' 'br\} .el\{\ .ds -- \(em\| .tr \*(Tr .ds L" `` .ds R" '' .ds M" `` .ds S" '' .ds N" `` .ds T" '' .ds L' ` .ds R' ' .ds M' ` .ds S' ' .ds N' ` .ds T' ' .ds PI \(*p 'br\} .\" If the F register is turned on, we'll generate .\" index entries out stderr for the following things: .\" TH Title .\" SH Header .\" Sh Subsection .\" Ip Item .\" X<> Xref (embedded .\" Of course, you have to process the output yourself .\" in some meaninful fashion. .if \nF \{ .de IX .tm Index:\\$1\t\\n%\t"\\$2" .. .nr % 0 .rr F .\} .TH PcapUtils 3 "perl 5.005, patch 03" "7/Apr/1999" "User Contributed Perl Documentation" .UC .if n .hy 0 .if n .na .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .de CQ \" put $1 in typewriter font .ft CW 'if n "\c 'if t \\&\\$1\c 'if n \\&\\$1\c 'if n \&" \\&\\$2 \\$3 \\$4 \\$5 \\$6 \\$7 '.ft R .. .\" @(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2 . \" AM - accent mark definitions .bd B 3 . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds ? ? . ds ! ! . ds / . ds q .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds ? \s-2c\h'-\w'c'u*7/10'\u\h'\*(#H'\zi\d\s+2\h'\w'c'u*8/10' . ds ! \s-2\(or\s+2\h'-\w'\(or'u'\v'-.8m'.\v'.8m' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' . ds q o\h'-\w'o'u*8/10'\s-4\v'.4m'\z\(*i\v'-.4m'\s+4\h'\w'o'u*8/10' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds v \\k:\h'-(\\n(.wu*9/10-\*(#H)'\v'-\*(#V'\*(#[\s-4v\s0\v'\*(#V'\h'|\\n:u'\*(#] .ds _ \\k:\h'-(\\n(.wu*9/10-\*(#H+(\*(#F*2/3))'\v'-.4m'\z\(hy\v'.4m'\h'|\\n:u' .ds . \\k:\h'-(\\n(.wu*8/10)'\v'\*(#V*4/10'\z.\v'-\*(#V*4/10'\h'|\\n:u' .ds 3 \*(#[\v'.2m'\s-2\&3\s0\v'-.2m'\*(#] .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E .ds oe o\h'-(\w'o'u*4/10)'e .ds Oe O\h'-(\w'O'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds v \h'-1'\o'\(aa\(ga' . ds _ \h'-1'^ . ds . \h'-1'. . ds 3 3 . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE . ds oe oe . ds Oe OE .\} .rm #[ #] #H #V #F C .SH "NAME" \f(CWNet::PcapUtils\fR \- Utility routines for Net::Pcap module .SH "SYNOPSIS" .PP .Vb 2 \& require Net::Pcap 0.03; \& use Net::PcapUtils; .Ve .Vb 1 \& # Call function for all packets received .Ve .Vb 1 \& Net::PcapUtils::loop(\e&callbackfn, [optional args]); .Ve .Vb 1 \& # Return the next packet available on the interface .Ve .Vb 1 \& ($pkt, %hdr) = Net::PcapUtils::next($pcap_t); .Ve .Vb 1 \& # Open a network device for processing .Ve .Vb 1 \& $pcap_t = Net::PcapUtils::open([optional args]); .Ve .SH "DESCRIPTION" Net::PcapUtils is a module to sit in front of Net::Pcap in order to hide some of the \fIpcap\fR\|(3) initialisation by providing sensible defaults. This enables a programmer to easily write small, specific scripts for a particular purpose without having to worry about too many details. .PP The functions implemented in Net::PcapUtils are named after those in Net::Pcap. The \fBloop\fR function sits in a loop and executes a callback for each packet received, while \fBnext\fR retrieves the next packet from the network device, and \fBopen\fR returns an opened packet descriptor suitable for use with other Net::Pcap routines. .Sh "Functions" .Ip "\fBNet::PcapUtils::loop(\e&callback_fn, [\s-1ARG\s0 => value]);\fR" 5 Given a callback function and a list of optional named parameterss, open a network interface, configure it, and execute the callback function for each packet received on the interface. If the \s-1SAVEFILE\s0 parameter is present, a saved file of that name will be opened for reading, else the network interface specified by the \s-1DEV\s0 parameter will be opened. If no saved file or device is specified, the interface returned by \fINet::Pcap::lookupdev()\fR is opened. .Sp The optional arguments are those which are normally passed to the \fIpcap_open_live()\fR function from the \fIpcap\fR\|(3) library. Their defaults are given below. .Sp .Vb 10 \& my %args = ( \& SNAPLEN => 100, # Num bytes to capture from packet \& PROMISC => 1, # Operate in promiscuous mode? \& TIMEOUT => 1000, # Read timeout (ms) \& NUMPACKETS => -1, # Pkts to read (-1 = loop forever) \& FILTER => '', # Filter string \& USERDATA => '', # Passed as first arg to callback fn \& SAVEFILE => '', # Default save file \& DEV => '', # Network interface to open \& ); .Ve Consult the documentation for the \fIpcap\fR\|(3) library for more details on the nature of these parameters. .Sp On error, this function returns an error string describing the error. An empty string is returned upon success. .Ip "\fBNet::PcapUtils::open([\s-1ARG\s0 => value]);\fR" 5 Return a packet capture descriptor. The optional arguments passed to this function are the same as those which can be passed to \fINet::PcapUtils::loop()\fR. .Sp If the \fIopen()\fR command was successful, it returns a reference to a packet capture descriptor, else a string containing an error message. .Ip "\fBNet::PcapUtils::next($pcap_t);\fR" 5 Return the next packet available on the interface specified by packet capture descriptor \f(CW$pcap_t\fR. This may be obtained from the \fINet::PcapUtils::open()\fR function, \fINet::Pcap::open_live()\fR or \fINet::Pcap::open_offline()\fR. .SH "EXAMPLE" The following script prints a message for each IP packet received. .PP .Vb 1 \& #!/usr/bin/perl -w .Ve .Vb 2 \& use strict; \& use Net::PcapUtils; .Ve .Vb 3 \& sub process_pkt { \& print("packet\en"); \& } .Ve .Vb 1 \& Net::PcapUtils::loop(\e&process_pkt, FILTER => 'ip'); .Ve .SH "SEE ALSO" The \f(CWNet::Pcap\fR module for XS bindings to the \f(CWpcap(3)\fR library. .PP The pcap library is available from ftp://ftp.ee.lbl.gov/libpcap.tar.Z .SH "COPYRIGHT" .PP .Vb 3 \& Copyright (c) 1995,1996,1997,1998,1999 ANU and CSIRO on behalf of \& the participants in the CRC for Advanced Computational Systems \& ('ACSys'). .Ve .Vb 3 \& ACSys makes this software and all associated data and documentation \& ('Software') available free of charge. You may make copies of the \& Software but you must include all of this notice on any copy. .Ve .Vb 5 \& The Software was developed for research purposes and ACSys does not \& warrant that it is error free or fit for any purpose. ACSys \& disclaims any liability for all claims, expenses, losses, damages \& and costs any user may incur as a result of using, copying or \& modifying the Software. .Ve .SH "AUTHOR" Tim Potter .rn }` '' .IX Title "PcapUtils 3" .IX Name "C - Utility routines for Net::Pcap module" .IX Header "NAME" .IX Header "SYNOPSIS" .IX Header "DESCRIPTION" .IX Subsection "Functions" .IX Item "\fBNet::PcapUtils::loop(\e&callback_fn, [\s-1ARG\s0 => value]);\fR" .IX Item "\fBNet::PcapUtils::open([\s-1ARG\s0 => value]);\fR" .IX Item "\fBNet::PcapUtils::next($pcap_t);\fR" .IX Header "EXAMPLE" .IX Header "SEE ALSO" .IX Header "COPYRIGHT" .IX Header "AUTHOR" n sits kêR3’íA¢„>8B58B58p‰./usr/localman/ó/íA kê^i’íA¢„>8ýA58ýA58p‰./usr/local/binó/íA kê¶F’íA¢„>8I58I58p‰./usr/local/libó/íA kêÑ©“íA¢„>8wI58wI58paŠ./usr/local/lib/perl5etó/íA kêJ׬“íA¢„>8ÿB58ÿB58peŒ./usr/local/lib/perl5/site_perló/íA kêM­“íA¢„>8ƒ>8ƒ>8pkŒ./usr/local/lib/perl5/site_perl/5.0052-ó/íA kê~§®“íA¢„>8FC58FC58plŒ./usr/local/lib/perl5/site_perl/5.005/aixen.ttó/íA kêºô¯“íA¢„>8cr>8cr>8p./usr/local/lib/perl5/site_perl/5.005/aix/autotó/íA kêh°“íA¢„>8ÍH58ÍH58p./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net.pmUó/íA kê„ ±“íA¢„>8FC58FC58p|./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/Pcapó/íA kêÞ…Ï“íA¢„>8ÍH58ÍH58p ./usr/local/lib/perl5/site_perl/5.005/aix/auto/Net/PcapUtils.paó/íA kê†À´“íA¢„>8FC58FC58p}./usr/local/lib/perl5/site_perl/5.005/aix/Net/Nó/íA kêj¾Í“íA¢„>8ÌH58ÌH58p./usr/local/lib/perl5/site_perl/5.005/NetNet/Nó/íA kêl˜»’íA¢„>8òC58òC58p ‰./usr/local/lib/Net-Pcap-0.03l/ó/íA kꩼ’íA£„>8óC58óC58p!‰./usr/local/lib/Net-Pcap-0.03/tó/íA kêlàÑ“íA£„>8¬I58¬I58p0./usr/local/lib/Net-PcapUtils-0.0105/Neó/íA kêtýÓ“íA£„>8¬I58¬I58p1./usr/local/lib/Net-PcapUtils-0.01/t/Neó/íA kê˜ß íA£„>8ŽC58ŽC58pÎ./usr/local/manó/íA kꜸ“íA£„>8šr>8šr>8pÇ./usr/local/man/man3capó/íAkêŠ Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } my $count = 0; sub process_pkt { my($user, $hdr, $pkt) = @_; my %stats; print("In process_pkt:\n"); Net::Pcap::stats($pcap_t, \%stats); $count++; if ($count != $stats{ps_recv}) { print("Bad statistics\n"); print("not ok\n"); exit; } print("Received $stats{ps_recv}, dropped $stats{ps_drop}, ", "interface dropped $stats{ps_ifdrop}\n"); } Net::Pcap::loop($pcap_t, 10, \&process_pkt, 0); Net::Pcap::close($pcap_t); print("ok\n"); ss_p kê’ Ÿ“¤¿ „>8òC58òC58`Ä‹¿./usr/local/lib/Net-Pcap-0.03/t/05-dump.t.tUtó/¤#!/usr/bin/perl # # Test loop function # # $Id: 05-dump.t,v 1.5 1999/03/15 06:37:26 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); my($dev, $pcap_t, $pcap_dumper_t, $err); my $dumpfile = "/tmp/Net-Pcap-dump.$$"; # Must run as root if ($UID != 0) { print("not ok\n"); exit; } # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, $dumpfile); if (!defined($pcap_dumper_t)) { print("Net::Pcap::dump_open failed: ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } my($count) = 0; sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "xyz") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "xyz"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); $count++; } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "xyz"); Net::Pcap::close($pcap_t); Net::Pcap::dump_close($pcap_dumper_t); if (!-f $dumpfile) { print("No save file created\n"); print("not ok\n"); } else { print("ok\n"); } END { unlink($dumpfile); } v kêÞ “¤¦ „>8òC58òC58`Æ‹¦./usr/local/lib/Net-Pcap-0.03/t/02-lookup.ttUtó/¤#!/usr/bin/perl # # Test lookup functions # # $Id: 02-lookup.t,v 1.4 1999/03/15 06:33:29 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::Pcap; print("1..2\n"); my($dev, $net, $mask, $err); # # Test lookupdev() function # $dev = Net::Pcap::lookupdev(\$err); if ($dev eq "") { print("not ok\n"); } else { print("ok\n"); } if ($dev eq "") { print("Net::Pcap::lookupdev returned error $err\n"); print("not ok\n"); exit; } else { print("Net::Pcap::lookupdev returned device $dev\n"); } # # Test lookupnet() function # # From test.pl, Net-Pcap-0.01.tar.gz sub dotquad { my($na, $nb, $nc, $nd); my ( $net ) = @_ ; $na=$net >> 24 & 255 ; $nb=$net >> 16 & 255 ; $nc=$net >> 8 & 255 ; $nd=$net & 255 ; return ( "$na.$nb.$nc.$nd") ; } my($result); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); if ($result == -1) { print("not ok\n"); print("Net::Pcap::lookupnet returned error $err\n"); exit; } else { print("Net::Pcap::lookupnet returned net ", dotquad($net), " and mask ", dotquad($mask), "\n"); } if (($net == 0) or ($mask == 0)) { print("not ok\n"); } else { print("ok\n"); }  kêtg¡“¤²  „>8òC58òC58`² ./usr/local/lib/Net-Pcap-0.03/t/10-fileno.ttUtó/¤#!/usr/bin/perl # # Test loop function # # $Id: 10-fileno.t,v 1.5 1999/03/15 06:37:26 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..4\n"); my($dev, $pcap_t, $pcap_dumper_t, $err); my $dumpfile = "/tmp/Net-Pcap-dump.$$"; # Must run as root if ($UID != 0) { print("not ok\n"); exit; } # # Test file and fileno on offline interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, $dumpfile); if (!defined($pcap_dumper_t)) { print("Net::Pcap::dump_open failed: ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "xyz") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "xyz"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "xyz"); Net::Pcap::close($pcap_t); Net::Pcap::dump_close($pcap_dumper_t); $pcap_t = Net::Pcap::open_offline($dumpfile, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_offline returned error $err\n"); print("not ok\n"); exit; } my($fh, $fileno); $fh = Net::Pcap::file($pcap_t); $fileno = Net::Pcap::fileno($pcap_t); if (!defined($fh)) { print("bad file handle returned by Net::Pcap::file\n"); print("not ok\n"); } else { print("ok\n"); } if ($fileno != -1) { print("Bad fileno returned by Net::Pcap::fileno\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); # # Test file and fileno on live connection # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } $fh = Net::Pcap::file($pcap_t); $fileno = Net::Pcap::fileno($pcap_t); if (defined($fh)) { print("bad file handle returned by Net::Pcap::file\n"); print("not ok\n"); } else { print("ok\n"); } if ($fileno < 0) { print("Bad fileno returned by Net::Pcap::fileno\n"); print("not ok\n"); } else { print("ok\n"); } Net::Pcap::close($pcap_t); END { unlink($dumpfile); } # Def kêRp¢“¤Š „>8òC58òC58`Š./usr/local/lib/Net-Pcap-0.03/t/04-loop.tttUtó/¤#!/usr/bin/perl # # Test loop function # # $Id: 04-loop.t,v 1.5 1999/03/15 06:33:29 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); # Must run as root if ($UID != 0) { print("must run as root!\n"); print("not ok\n"); exit; } my($dev, $pcap_t, $err); # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } my $count = 0; sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "abc") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "abc"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } print("Received packet of len $hdr->{len}\n"); $count++; } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "abc"); if ($count != 10) { print("Bad pkt count\n"); print("not ok\n"); exit; } Net::Pcap::close($pcap_t); print("ok\n"); umper_ kê࣓¤X „>8òC58òC58pOŽX./usr/local/lib/Net-Pcap-0.03/t/README.ó/¤Most of these tests are required to be run as root. Note that some of these tests require a working network interface with actual traffic on it. For example the loop test waits for 10 packets to be received on the network before exiting. If there is no traffic on the interface, this test will block. The memory leak tests do not complete.  kê,p¤“¤X „>8òC58òC58`NX./usr/local/lib/Net-Pcap-0.03/t/12-next.tttUtó/¤#!/usr/bin/perl # # Test next function # # $Id: 12-next.t,v 1.5 1999/03/15 06:33:32 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..1\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err, $net, $mask, $result, $filter); # # Test loop on open_live interface # $dev = Net::Pcap::lookupdev(\$err); $result = Net::Pcap::lookupnet($dev, \$net, \$mask, \$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 1, \$err); # From test.pl, Net-Pcap-0.01.tar.gz print( "dev is ", $dev, ", net is ", $net, ", mask is ", $mask. "\n"); sub dotquad { my($na, $nb, $nc, $nd); my ( $net ) = @_ ; $na=$net >> 24 & 255 ; $nb=$net >> 16 & 255 ; $nc=$net >> 8 & 255 ; $nd=$net & 255 ; return ( "$na.$nb.$nc.$nd") ; } print ("net is ", dotquad($net), " mask is ", dotquad($mask), "\n"); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $result = Net::Pcap::compile($pcap_t, \$filter, "ip", 0, $mask); if ($result == -1) { print("Net::Pcap::compile returned ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } $result = Net::Pcap::setfilter($pcap_t, $filter); if ($result == -1) { print("Net::Pcap::setfilter returned ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } for my $count (1..10) { my($pkt, %hdr); while (!($pkt = Net::Pcap::next($pcap_t, \%hdr))) { print("no pkt received (but that's OK)\n"); } if (!defined(%hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("header is not defined\n"), if (!defined(%hdr)); print("packet is not defined\n"), if (!defined($pkt)); print("not ok\n"); exit; } print("$count: received packet of len $hdr{len}\n"); } Net::Pcap::close($pcap_t); print("ok\n");  kêL©¥“¤. „>8òC58òC58pªŽ../usr/local/lib/Net-Pcap-0.03/t/03-openlive.tUtó/¤#!/usr/bin/perl # # Test open_live functions # # $Id: 03-openlive.t,v 1.4 1999/03/15 06:33:29 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..3\n"); # Must run as root if ($UID != 0) { print("not ok\n"); exit; } my($dev, $pcap_t, $err); # # Test open_live function # $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err on device $dev\n"); print("not ok\n"); exit; } print("ok\n"); # # Test close function # Net::Pcap::close($pcap_t); print("ok\n"); # # Test open_live() with dodgy device # $pcap_t = Net::Pcap::open_live("beans", 1024, 1, 0, \$err); if (defined($pcap_t)) { print("not ok\n"); } else { print("ok\n"); } } k굦“¤­ „>8òC58òC58pòŽ­./usr/local/lib/Net-Pcap-0.03/t/01-module.ttUtó/¤#!/usr/bin/perl # # Test module import # # $Id: 01-module.t,v 1.1 1999/03/10 02:48:40 tpot Exp $ # use strict; use ExtUtils::testlib; use Net::Pcap; print("1..1\nok\n"); pri kê`’§“¤à¡„>8òC58òC58`Pà./usr/local/lib/Net-Pcap-0.03/t/leaktest1.plUtó/¤#!/usr/bin/perl # # Test for memory leaks by sitting in an infinite loop and flood # pinging from another window. Memory leaks become apparent quickly. # # $Id: leaktest1.pl,v 1.2 1999/03/14 03:14:09 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; die("Must run as root!\n"), if ($UID != 0); my($dev, $err, $pcap_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { die("Net::Pcap::open_live returned error $err"); } my $count; sub process_pkt { my($user, $hdr, $pkt) = @_; $count++; print("$count\n"), if (($count % 1000) == 0); } Net::Pcap::loop($pcap_t, 0, \&process_pkt, "1234"); Net::Pcap::close($pcap_t);  kêþv¨“¤ ¡„>8óC58óC58P ./usr/local/lib/Net-Pcap-0.03/t/06-offline.tUtó/¤#!/usr/bin/perl # # Test open_offline # # $Id: 06-offline.t,v 1.6 1999/03/15 06:37:26 tpot Exp $ # use strict; use English; use ExtUtils::testlib; use Net::Pcap; print("1..4\n"); my($pcap_t, $err); my $dumpfile = "/tmp/Net-Pcap-dump.$$"; # Must run as root if ($UID != 0) { print("not ok\n"); exit; } # # Test open_offline of bad file (not created yet) # $pcap_t = Net::Pcap::open_offline($dumpfile, \$err); if (defined($pcap_t)) { print("Net::Pcap::open_offline worked for dummy file\n"); print("not ok\n"); } else { print("ok\n"); } # # Test open_offline of good file. Need to create it first. # my($dev, $pcap_dumper_t); $dev = Net::Pcap::lookupdev(\$err); $pcap_t = Net::Pcap::open_live($dev, 1024, 1, 0, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_live returned error $err\n"); print("not ok\n"); exit; } $pcap_dumper_t = Net::Pcap::dump_open($pcap_t, $dumpfile); if (!defined($pcap_dumper_t)) { print("Net::Pcap::dump_open failed: ", Net::Pcap::geterr($pcap_t), "\n"); print("not ok\n"); exit; } sub process_pkt { my($user, $hdr, $pkt) = @_; if (($user ne "xyz") or !defined($hdr) or !defined($pkt)) { print("Bad args passed to callback\n"); print("Bad user data\n"), if ($user ne "xyz"); print("Bad pkthdr\n"), if (!defined($hdr)); print("Bad pkt data\n"), if (!defined($pkt)); print("not ok\n"); exit; } Net::Pcap::dump($pcap_dumper_t, $hdr, $pkt); } Net::Pcap::loop($pcap_t, 10, \&process_pkt, "xyz"); Net::Pcap::close($pcap_t); Net::Pcap::dump_close($pcap_dumper_t); if (!-f $dumpfile) { print("No save file created\n"); print("not ok\n"); } else { print("ok\n"); } $pcap_t = Net::Pcap::open_offline($dumpfile, \$err); if (!defined($pcap_t)) { print("Net::Pcap::open_offline failed: $err\n"); print("not ok\n"); exit; } my($major, $minor, $swapped); $major = Net::Pcap::major_version($pcap_t); $minor = Net::Pcap::minor_version($pcap_t); $swapped = Net::Pcap::is_swapped($pcap_t); print("File saved with libpcap versi