-$Id: README.aix,v 1.3 2000/02/19 21:58:39 guy Exp $
+libpcap 0.7.1 and later appear to work on AIX when using AIX's native
+BPF; that appears to work better than DLPI does. Note that you may have
+to run AIX's tcpdump, as root, before configuring, building, and
+installing libpcap, in order to create the "/dev/bpf" devices and load
+the BPF driver.
+
+However, libpcap 0.7.1 doesn't work perfectly with AIX's BPF - it
+appears that AIX's BPF devices inform their user that packets were
+dropped since the last successful read by returning -1 and setting
+"errno" to EFAULT, which libpcap 0.7.1 treats as an error. The current
+CVS version of libpcap ignores EFAULT on AIX; it appears that this fixes
+the problem.
+
+Some earlier notes:
+
+The notes about libpcap may not apply, with libpcap 0.7.1 and later, but
+they're preserved here for historical reasons.
+
+The notes about glib, gtk+, and Ethereal may not apply, as we're now
+using GLib 2.x and GTK+ 2.x, and don't have our own gtkclist.c, but
+they're also preserved for historical reasons.
After much work and toil, Craig Rodrigues was able to compile libpcap
and Ethereal on AIX 4.3.2. His odyssey is document in various e-mails
-at http://ethereal.zing.org/lists/ethereal-dev/199911/
+at http://www.ethereal.com/lists/ethereal-dev/199911/
Here are a few excerpts. Note that, to configure "libpcap" to use DLPI
rather than BPF (which it'll apparently use by default on AIX),
After much sweat and toil, I have managed to get gtk 1.2.6 to
compile and not dump core under AIX. The solutions were to
-(1) apply the attached patch to the configure.in in the glib-1.2.6
+(1) apply the attached patch to the configure.ac in the glib-1.2.6
subdirectory
(2) In the file gtk+-1.2.6/gtk/Makefile, add a link flag -lgdk to link
http://www.gis.net/~craigr
rodrigc@mediaone.net
-*** configure.in.old Thu Oct 7 17:27:43 1999
---- configure.in Sun Nov 7 19:34:36 1999
+*** configure.ac.old Thu Oct 7 17:27:43 1999
+--- configure.ac Sun Nov 7 19:34:36 1999
***************
*** 795,809 ****
fi
But basically, after I fixed up pcap-dlpi.c, I managed to get libpcap
working under AIX. This enabled me to successfully run Ethereal,
ie. all the packets on my Ethernet network correctly showed up
-as Ethernet and not Token Ring in the Ethereal screen.
+as Ethernet and not Token Ring in the Wireshark screen.
YAY!
--
> > Any ideas why this causes trouble?
>
> Mismatches between the layouts of data structures as declared in the
-> "gtk/gtk*.h" files in the Ethereal source tree and the layouts as
+> "gtk/gtk*.h" files in the Wireshark source tree and the layouts as
> declared in the header files in the GTK+ source (either due to header
> file differences - although the header files appear to be identical to
> the GTK+ 1.2.6 ones - or due to compiler behavior differences)?