[Coral-dev] Large File Support and EOVERFLOW

[David Rosal]

Hello.

Peter Van Epp wrote:
> On Tue, May 16, 2006 at 08:31:47AM -0700, David Moore wrote:

> 	Since I haven't seen any other answers float by, some operating systems
> need special flags to get large (> 2 gig) file support enabled. Linux appears 
> to be one of them since I have a linux machine with the ntop ring buffer code 
> installed that blows up on a tcpdump at 2 gigs (and so far we haven't found 
> the right bits to recompile with large file support :-)). As noted FreeBSD 
> (where I usually run) does it by default. If you like I can look at the config
> file for argus and see what it looks at to see if large file support needs
> special flags which may give you a pointer.

I also had large file problems with tcpdump in Linux, and I 
fixed them by passing these flags to the compiler:

-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_LARGEFILE64_SOURCE

and replacing calls to ftell() and fseek() to ftello() and 
fseeko(). There's also another minor tweak in tcpdump.

I attach the patches for tcpdump-3.9.4 and libpcap-0.9.4.
If someone finds a bug or an enhancement to these patches please 
let me know.

BTW: I have another patch for tcpslice-1.1a3, that makes it 
compilable under Linux. If someone's interested I'll be pleased 
to share it.


*David

-------------- next part --------------
A non-text attachment was scrubbed...
Name: libpcap-0.9.4-largefile.patch
Type: text/x-patch
Size: 748 bytes
Desc: not available
Url : http://rommie.caida.org/pipermail/coral-dev/attachments/20060518/ed323804/libpcap-0.9.4-largefile.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: tcpdump-3.9.4-largefile.patch
Type: text/x-patch
Size: 734 bytes
Desc: not available
Url : http://rommie.caida.org/pipermail/coral-dev/attachments/20060518/ed323804/tcpdump-3.9.4-largefile.bin