Skip to content
Newer
Older
100644 89 lines (59 sloc) 3.05 KB
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
1 Using BPF:
2
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
3 (1) AIX 4.x's version of BPF is undocumented and somewhat unstandard; the
4 current BPF support code includes changes that should work around
d0dc7ff @yuguy Add updates noting that the BPF devices and BPF driver might not exist
yuguy authored May 31, 2002
5 that; it appears to compile and work on at least one AIX 4.3.3
6 machine.
7
8 Note that the BPF driver and the "/dev/bpf" devices might not exist
5e04b48 @yuguy From Shaun Clowes: update the to reflect the fact that it should now
yuguy authored Apr 17, 2003
9 on your machine; AIX's tcpdump loads the driver and creates the
10 devices if they don't already exist. Our libpcap should do the
11 same, and the configure script should detect that it's on an AIX
12 system and choose BPF even if the devices aren't there.
d0dc7ff @yuguy Add updates noting that the BPF devices and BPF driver might not exist
yuguy authored May 31, 2002
13
a2ebd87 @infrastation update README.aix after GH #52
infrastation authored Apr 11, 2014
14 Also note that tcpdump _binary_ compiled on AIX 4 may have a problem
15 doing the initial loading of the BPF driver if copied to AIX 5 and
16 run there (GH #52). tcpdump binary natively compiled on AIX 5 should
17 not have this issue.
18
d0dc7ff @yuguy Add updates noting that the BPF devices and BPF driver might not exist
yuguy authored May 31, 2002
19 (2) If libpcap doesn't compile on your machine when configured to use
20 BPF, or if the workarounds fail to make it work correctly, you
757827d @yuguy packaging/pcap.spec is generated from packaging/pcap.spec.in; don't
yuguy authored May 30, 2008
21 should send to tcpdump-workers@lists.tcpdump.org a detailed bug
22 report (if the compile fails, send us the compile error messages;
23 if it compiles but fails to work correctly, send us as detailed as
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
24 possible a description of the symptoms, including indications of the
25 network link-layer type being wrong or time stamps being wrong).
26
216bb59 @guyharris Point people to GitHub rather than Sourceforge for bug reports/patche…
guyharris authored Mar 15, 2013
27 If you fix the problems yourself, please submit a patch by forking
28 the branch at
83206d9 @yuguy Fix more patches@tcpdump.org references to point to the SourceForge
yuguy authored May 30, 2008
29
b267226 @guyharris Point people to the the-tcpdump-group repositories, not the mcr repos…
guyharris authored Apr 15, 2013
30 https://github.com/the-tcpdump-group/libpcap/issues
83206d9 @yuguy Fix more patches@tcpdump.org references to point to the SourceForge
yuguy authored May 30, 2008
31
216bb59 @guyharris Point people to GitHub rather than Sourceforge for bug reports/patche…
guyharris authored Mar 15, 2013
32 and issuing a pull request, so we can incorporate the fixes into the
33 next release.
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
34
35 If you don't fix the problems yourself, you can, as a workaround,
36 make libpcap use DLPI instead of BPF.
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
37
38 This can be done by specifying the flag:
39
40 --with-pcap=dlpi
41
42 to the "configure" script for libpcap.
43
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
44 If you use DLPI:
45
46 (1) It is a good idea to have the latest version of the DLPI driver on
47 your system, since certain versions may be buggy and cause your AIX
48 system to crash. DLPI is included in the fileset bos.rte.tty. I
49 found that the DLPI driver that came with AIX 4.3.2 was buggy, and
50 had to upgrade to bos.rte.tty 4.3.2.4:
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
51
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
52 lslpp -l bos.rte.tty
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
53
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
54 bos.rte.tty 4.3.2.4 COMMITTED Base TTY Support and Commands
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
55
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
56 Updates for AIX filesets can be obtained from:
57 ftp://service.software.ibm.com/aix/fixes/
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
58
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
59 These updates can be installed with the smit program.
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
60
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
61 (2) After compiling libpcap, you need to make sure that the DLPI driver
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
62 is loaded. Type:
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
63
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
64 strload -q -d dlpi
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
65
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
66 If the result is:
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
67
68 dlpi: yes
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
69
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
70 then the DLPI driver is loaded correctly.
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
71
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
72 If it is:
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
73
74 dlpi: no
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
75
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
76 Then you need to type:
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
77
78 strload -f /etc/dlpi.conf
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
79
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
80 Check again with strload -q -d dlpi that the dlpi driver is loaded.
b0c7a34 *** empty log message ***
mcr authored Jun 11, 2000
81
28e545e @yuguy Note that we now attempt to work around AIX BPF's weirdness, indicate
yuguy authored Nov 17, 2001
82 Alternatively, you can uncomment the lines for DLPI in
83 /etc/pse.conf and reboot the machine; this way DLPI will always
84 be loaded when you boot your system.
45ba69f @yuguy Split the README items into "using BPF" and "using DLPI" items; if you
yuguy authored Oct 8, 2002
85
86 (3) There appears to be a problem in the DLPI code in some versions of
87 AIX, causing a warning about DL_PROMISC_MULTI failing; this might
88 be responsible for DLPI not being able to capture outgoing packets.
Something went wrong with that request. Please try again.