Activity for Zero effect
-
Zero effect posted a comment on ticket #6
Alright, try the latest revision and if it works, I will make a new version.
-
CentOS 7 fixes
-
Sorry for the late reply, I am quite busy these days. As far as compiling goes I don't think that I properly support earlier versions of gcc anymore. It can be made to compile, however, the standard c++11 standard library is really buggy in those earlier compilers. I might noodle around a little bit and see whether it can work with boost instead.
-
Handling of exception thrown in a worker thread
-
and the test case is fixed, but that implies that an exception is thrown in a worker thread that basically leads to everything crumbling apart
-
reproduction test case for the buffer corruption bug
-
merge
-
Check 1.0.4-r2. It should now build with pfring enabled.
-
Getting segfault with Ubuntu 18.04
-
Ok, I found at least another bug that I was able to reproduce - check the latest release 1.0.4.
-
fixed bad packet lost computation
-
Ok, there are some possible corner cases when that functionality can fail. Can you download the latest revision from the repo (hg.code.sf.net/p/rcdcap/code rcdcap-code) and use it instead to validate whether my guess is correct?
-
merge
-
Fixed initialization on push
-
bumped version
-
Ok, it seems to be a new problem with ASIO. Can you try 1.0.3?
-
switched from async_write_some to async_write
-
Disabling rewind on stop
-
merge
-
Ok, can you try the latest version (1.0.2)? It fixes at least one source of memory corruption.
-
Ok, can you try the latest version (1.0.2). It fixes at least one source of memory corruption.
-
updated documentation
-
Fixed crash in discard sink
-
merge
-
Can you run from command line with gdb attached and copy the backtrace when it crashes: sudo gdb -batch -ex "run" -ex "bt" --args ./rcdcap -i ens0 --erspan --tap-persist --tap-device mon1 2>&1 | grep -v ^"No stack."$
-
Also, can you test the newer version that I released (1.0.1) that fixes a crash on init?
-
one-way traffic only
-
Can you provide a backtrace? Also consider opening an issue in the tickets system.
-
added also support for the injection sink
-
bumped the version number
-
updated cxxopts
-
tap devices now work on windows
-
merge
-
fixed multiple expressions
-
removed dependency on boost program options
-
merge
-
* Fixed: the text sink should no longer get stuck
-
thanks message
-
Zero effect posted a comment on ticket #2
Are the remote packets in one direction or the local packets?
-
You can increase the internal buffer size, but it won't help you for sustained 10G load. Try running it in dummy mode, this will tell us whether it is bottlenecked by libpcap.
-
[FIXED} Custom Header Size to Decapsulate
-
Custom Header Size to Decapsulate
-
yes, you need to recompile
-
Another user (Walter Shoeber) suggested a patch for Juniper routers. I just commited slightly altered version in the Mercurial repo. Can you test it and say whether it fixes your issue?
-
I need binary files with original packets
-
I meant just an encapsulated stream of packets, so that i can debug it.
-
I meant just a encapsulated stream of packets, so that i can debug it.
-
Can you provide a very simple capture of ping (ICMP) packets?
-
What is your version of cmake? Sent from my Samsung Galaxy smartphone. -------- Original message --------From: Julien nirlya@users.sourceforge.net Date: 3/27/18 15:06 (GMT+01:00) To: "[rcdcap:discussion]" general@discussion.rcdcap.p.re.sourceforge.net Subject: [rcdcap:discussion] Packet truncation Hi, I still have a problem with compilation : [ 85%] Building CXX object src/CMakeFiles/rcdcap.dir/rcdcap-main.cc.o cd /tmp/rcdcap-code/source/build-make/src && /usr/bin/c++ -DLINUX -I/tmp/rcdcap-code/source/build-make/include...
-
The build was broken on linux - it should work fine now Sent from my Samsung Galaxy smartphone. -------- Original message --------From: Julien nirlya@users.sourceforge.net Date: 3/20/18 11:44 (GMT+01:00) To: "[rcdcap:discussion]" general@discussion.rcdcap.p.re.sourceforge.net Subject: [rcdcap:discussion] Packet truncation Hi, I just try your last commit but still have : terminate called after throwing an instance of 'RCDCap::Exception' what(): /tmp/RCDcap/src/sink.cc:310: Invalid length; the complete...
-
Slightly more modern approach that works on newer versions of cmake
-
Some compilation fixes
-
Hello, I can probably add a force flag which avoids the check. Would this be sufficient? Sent from my Samsung Galaxy smartphone. -------- Original message --------From: Julien nirlya@users.sourceforge.net Date: 3/14/18 21:45 (GMT+01:00) To: "[rcdcap:discussion]" general@discussion.rcdcap.p.re.sourceforge.net Subject: [rcdcap:discussion] Packet truncation Hi, I would like to truncate packets before send it via gre tunnel. But I have this message : rcdcap:/etc/RCDCap/src/sink.cc:374: Invalid length;...
-
Try this instead: rcdcap -d -i eth1 --erspan --tap-persist --tap-device mon1 --snaplen 65535 host 1.1.1.1 rcdcap -d -i eth1 --erspan --tap-persist --tap-device mon2 --snaplen 65535 host 2.2.2.2
-
What version of Boost do you use?
-
If you want to capture jumbo frames you can increase the snapshot length to 9000 bytes. For example: rcdcap -s 9000 ... <your options="">
-
RCDCap is meant as intermediate application, so there isn't packet decapsulation in text format. If you want pretty printing you can pipe the output through tcpdump.
-
Try with the new version(0.8.1)
-
Command line args fix
-
It should work with the latest revision. I might make a new release in a few days with the latest fixes.
-
Burst packet processing for the PFRING source
-
Some setup for VS Code development
-
Added the very important thanks file
-
Made the algorithm for acquiring packets more g...
-
Fixed falling between the ribs race condition
-
Fixed hopefully most pipeline clogs
-
Fixed some of the clogging
-
Some fixes when packets are fixed due to overflow
-
Refactored common buffer to be more pessimistic
-
Alright, can you try the latest modification? My knowledge about this pipeline was...
-
Proper clean up after dropping packets
-
Can you check the latest revision? I have added a very simple option to bypass the...
-
Can you check the revision? I have added a very simple option to bypass the check...
-
Can you check the latest version? I have added a very simple option to bypass the...
-
Fixed ambiguity
-
Some way to ignore incomplete packets
-
Are you sure that you don't have jumbo frames enabled? You may increase the packet...
-
Can you try the latest Mercurial commit. It should fix the compilation issue.
-
PF_RING compilation fixes
-
You can probably open up a tap device (-t option) and then bridge it with your d...
-
Right, the PF_RING source node implementation doesn't follow the burst processing...
-
Right, the PF_RING source implementation doesn't follow the burst processing scheme...
-
I will look into this problem next week.
-
Well, basically CentOS 6.7 has gcc-4.4 which does not have good support for C++11....
-
It basically needs -std=c++0x or -std=c++11 and -mssse3 enabled. I will look into...
-
- Timeout fix
-
Some more documentation.
-
- Documentation about some new methods and memb...
-
Statistics sink documentation
-
Some additional comments.
-
Some more documentation and small fixes.
-
Some more documentation.
-
Some documentation and config fixes.
-
Ok, I think that Quiet Neighborhood is feature ...
-
IPv6 subnet table
-
Burst/sequence processing to further improve th...
-
Hacked some code, so that I can save some subne...
1 >
