Arnout Engelen
d7497c1ebf
As a last resort, match packets to processes when only the local part matches
...
Helps for applications with many short-lived connections (such as bittorrent)
and is correct except for exotic use cases anyway
2013-05-12 18:17:59 +00:00
Arnout Engelen
9d8555e17c
Don't needlessly recalculate the direction
2013-05-12 17:50:55 +00:00
Arnout Engelen
31b254e719
Use C++-style headers where available
2013-05-12 12:34:29 +00:00
Arnout Engelen
4ff973bbd7
make a 'runtests' make target that runs some 'unit test'-like tests. Fix crash when uid's without a password entry are encountered, return the uid as a string instead.
2012-03-15 22:31:28 +00:00
Arnout Engelen
2c04ca9267
Use negative return values on errors
2012-03-15 20:53:25 +00:00
Arnout Engelen
d7476faae1
Add proper license header and COPYING file with the GPLv2 text
2011-08-28 17:22:52 +00:00
Arnout Engelen
3d6ac8bdd3
remove ROBUST, this is taken care of by NDEBUG (thanks to Petr Uzel)
2008-12-31 15:52:26 +00:00
Arnout Engelen
22a28e973e
make 'forceexit' more fprintf-like, better error message when ioctl fails.
2008-12-31 15:40:48 +00:00
Arnout Engelen
76afed26b7
bugtracking mode, performance improvement by earlier caching of inode2pid data
2008-06-24 20:01:10 +00:00
Arnout Engelen
4a866021fc
error reporting, removal of stale files, removed warning
2006-11-04 15:43:55 +00:00
Arnout Engelen
501a379af5
add tracing to getLocal
2006-02-05 17:24:19 +00:00
Arnout Engelen
c66bc829ea
varia. now correctly sniffs in non-blocking mode (essential for multi-interface
...
sniffing), while requires at least libpcap 0.8
2005-04-03 09:31:26 +00:00
Arnout Engelen
4a3a21a5df
* Use std::map instead of hand-written hashtable
...
* Use handwritten inode-to-process-mapping instead of the
one taken from netstat
* Use a #define for using assertions
2005-01-15 12:28:35 +00:00
Arnout Engelen
389238c51a
make it compile with g++ 3.0 also
2004-09-17 19:40:45 +00:00
Arnout Engelen
45e3157f67
cleanups
2004-09-17 19:22:17 +00:00
Arnout Engelen
cd3fce3e54
hunting memory management bug
2004-09-15 12:49:05 +00:00
Arnout Engelen
fc333df257
cleanups. mainly memory leak fixes
2004-09-14 19:24:01 +00:00
Arnout Engelen
cf2f473cd1
several bugfixes, including some memory management
2004-09-14 16:14:23 +00:00
Arnout Engelen
8cbf4f04cc
Much cleaner code for dissecting the packets.
...
known issue: after a while, it seems to 'forget' a connection
belonged to a process and starts adding the traffic to the unknown
process.
2004-09-11 15:00:54 +00:00
Arnout Engelen
69423478b7
clean
2004-09-02 16:19:23 +00:00
Arnout Engelen
8697bf01a1
wild stab at supporting PPP ('Linux cooked capture') packets..
2004-09-02 16:10:25 +00:00
Arnout Engelen
19f633f2d4
IPv6 support! yay!
2004-09-01 15:35:05 +00:00
Arnout Engelen
e50d81eb5c
preliminary IPv6 support.
...
besides ::ffff:123.45.67.89, IPv6 packets now also really enter the system.
characterisation of local addresses and direction of the stream don't work
yet, so they are often filed under 'unknown' instead of their respective
process.
2004-09-01 11:21:00 +00:00
Arnout Engelen
71878bdcd3
now uses the ethernet_header structure in <net/ethernet.h> instead of a local one
2004-08-31 09:15:48 +00:00
Arnout Engelen
cde872adb1
several larger cleanups/bugfixes
2004-08-30 16:43:59 +00:00
Arnout Engelen
0518d27924
several code fixes and cleanups, revival of the 'unknown' process
2004-08-30 15:54:11 +00:00
Arnout Engelen
3b5ac96754
various cleanups
2004-08-30 14:29:18 +00:00
Arnout Engelen
200939f3fc
added support for monitoring multiple interfaces at once
2004-07-06 14:36:35 +00:00
Arnout Engelen
be624683f0
Initial import.
2004-06-29 13:31:04 +00:00
