> Hi *,
> I am the new maintainer of the tcpdump package for Debian and in the
> progress of going through the bug reports. One of them is
> #21356: tcpdump: on 2.1.96, tcpdump uses obsolete (AF_INET,SOCK_PACKET)
> > I get these message "tcpdump uses obsolete (AF_INET,SOCK_PACKET)" from
> > my 2.1.96 kernel when starting tcpdump. It still works fine, so
> > I'm classing this as a "wishlist" bug.
> I remember seeing these messages as well but they disappeared with 2.2.x
> Is SOCK_PACKET still considered obsolete?
I don't think they disappeared.
Yes, it is still obsolete. See packet (7). SOCK_PACKET is evil because
it requires libpcap to know about every possible link layer, with
(PF_PACKET,SOCK_DGRAM) the kernel handles this abstraction. Alexey
Kuznetsov's libpcap/tcpdump patches (ftp.inr.ac.ru:/ip-routing/lbl-tools)
They are e.g. used in the newest version of the SuSE tcpdump.
In the long run applying them (modulo the small nits like reversing the
meaning of -p) will b ea good idea, because it'll save you a
lot of work as tcpdump maintainer.
-- This is like TV. I don't like TV.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to firstname.lastname@example.org Please read the FAQ at http://www.tux.org/lkml/