> Hi *,
>
> I am the new maintainer of the tcpdump package for Debian and in the
> progress of going through the bug reports. One of them is
>
> #21356: tcpdump: on 2.1.96, tcpdump uses obsolete (AF_INET,SOCK_PACKET)
>
> > I get these message "tcpdump uses obsolete (AF_INET,SOCK_PACKET)" from
> > my 2.1.96 kernel when starting tcpdump. It still works fine, so
> > I'm classing this as a "wishlist" bug.
>
> I remember seeing these messages as well but they disappeared with 2.2.x
> Is SOCK_PACKET still considered obsolete?
I don't think they disappeared.
Yes, it is still obsolete. See packet (7). SOCK_PACKET is evil because
it requires libpcap to know about every possible link layer, with
(PF_PACKET,SOCK_DGRAM) the kernel handles this abstraction. Alexey
Kuznetsov's libpcap/tcpdump patches (ftp.inr.ac.ru:/ip-routing/lbl-tools)
fix it.
They are e.g. used in the newest version of the SuSE tcpdump.
In the long run applying them (modulo the small nits like reversing the
meaning of -p) will b ea good idea, because it'll save you a
lot of work as tcpdump maintainer.
-Andi
-- This is like TV. I don't like TV.- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/