Your message dated Sat, 30 Apr 2011 10:48:36 +0000
with message-id <e1qg7j2-0000az...@franck.debian.org>
and subject line Bug#623868: fixed in libpcap 1.1.1-4
has caused the Debian Bug report #623868,
regarding snapshot length corruption on live captures
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
623868: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=623868
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libpcap0.8
Version: 1.1.1-2
Severity: grave
Tags: squeeze sid
Justification: causes data loss
see: http://thread.gmane.org/gmane.network.tcpdump.devel/5018
this can be trivially reproduced on squeeze or sid:
edmonds@zappa{0}:~$ tcpdump --version
tcpdump version 4.1.1
libpcap version 1.1.1
Usage: tcpdump [-aAbdDefIKlLnNOpqRStuUvxX] [ -B size ] [ -c count ]
[ -C file_size ] [ -E algo:secret ] [ -F file ] [ -G seconds ]
[ -i interface ] [ -M secret ] [ -r file ]
[ -s snaplen ] [ -T type ] [ -w file ] [ -W filecount ]
[ -y datalinktype ] [ -z command ] [ -Z user ]
[ expression ]
edmonds@zappa{1}:~$ sudo tcpdump -s 128 -c 2 -pni lo -w /tmp/lo.pcap
1>/dev/null 2>&1 &
[1] 22573
edmonds@zappa{1}:~$ ping -c 1 -s 512 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 512(540) bytes of data.
520 bytes from 127.0.0.1: icmp_req=1 ttl=64 time=0.034 ms
--- 127.0.0.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.034/0.034/0.034/0.000 ms
edmonds@zappa{0}:~$
[1] + done sudo tcpdump -s 128 -c 2 -pni lo -w /tmp/lo.pcap >
/dev/null 2>&1
edmonds@zappa{0}:~$ tshark -r /tmp/lo.pcap -V -T text -n | grep '^Frame '
Frame 1 (554 bytes on wire, 122 bytes captured)
Frame 2 (554 bytes on wire, 122 bytes captured)
edmonds@zappa{0}:~$
with the latest git tip of libpcap:
sql1rd2:~# tcpdump --version
tcpdump version 4.3.0-PRE-GIT_2011_04_23
libpcap version 1.3.0-PRE-GIT_2011_04_23
Usage: tcpdump [-aAbdDefhIJKlLnNOpqRStuUvxX] [ -B size ] [ -c count ]
[ -C file_size ] [ -E algo:secret ] [ -F file ] [ -G seconds ]
[ -i interface ] [ -j tstamptype ] [ -M secret ]
[ -r file ] [ -s snaplen ] [ -T type ] [ -w file ]
[ -W filecount ] [ -y datalinktype ] [ -z command ]
[ -Z user ] [ expression ]
sql1rd2:~# tcpdump -s 128 -c 2 -pni lo -w /tmp/lo.pcap &
[1] 15377
sql1rd2:~# tcpdump: listening on lo, link-type EN10MB (Ethernet), capture
size 128 bytes
sql1rd2:~# ping -c 1 -s 512 127.0.0.1
PING 127.0.0.1 (127.0.0.1) 512(540) bytes of data.
2 packets captured
4 packets received by filter
0 packets dropped by kernel
520 bytes from 127.0.0.1: icmp_req=1 ttl=64 time=0.023 ms
--- 127.0.0.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.023/0.023/0.023/0.000 ms
sql1rd2:~# tshark -r /tmp/lo.pcap -V -T text -n | grep '^Frame '
Running as user "root" and group "root". This could be dangerous.
Frame 1 (554 bytes on wire, 128 bytes captured)
Frame 2 (554 bytes on wire, 128 bytes captured)
[1]+ Done tcpdump -s 128 -c 2 -pni lo -w /tmp/lo.pcap
sql1rd2:~#
note "122 bytes captured" in the first listing versus "128 bytes
captured" in the second.
this is fixed in upstream commit ea9432fabdf4b33cbc76d9437200e028f1c47c93,
"Fix the calculation of the frame size in memory-mapped captures."
there has not yet been a release on the 1.1 branch (or, well, any
release) since 1.1.1 that contains this fix. but the fix should most
likely be backported to the version in squeeze anyway.
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (900, 'unstable'), (800, 'testing'), (700, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages libpcap0.8 depends on:
ii libc6 2.11.2-13 Embedded GNU C Library: Shared lib
libpcap0.8 recommends no packages.
libpcap0.8 suggests no packages.
-- no debconf information
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: libpcap
Source-Version: 1.1.1-4
We believe that the bug you reported is fixed in the latest version of
libpcap, which is due to be installed in the Debian FTP archive:
libpcap-dev_1.1.1-4_all.deb
to main/libp/libpcap/libpcap-dev_1.1.1-4_all.deb
libpcap0.8-dbg_1.1.1-4_amd64.deb
to main/libp/libpcap/libpcap0.8-dbg_1.1.1-4_amd64.deb
libpcap0.8-dev_1.1.1-4_amd64.deb
to main/libp/libpcap/libpcap0.8-dev_1.1.1-4_amd64.deb
libpcap0.8_1.1.1-4_amd64.deb
to main/libp/libpcap/libpcap0.8_1.1.1-4_amd64.deb
libpcap_1.1.1-4.debian.tar.gz
to main/libp/libpcap/libpcap_1.1.1-4.debian.tar.gz
libpcap_1.1.1-4.dsc
to main/libp/libpcap/libpcap_1.1.1-4.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 623...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Romain Francoise <rfranco...@debian.org> (supplier of updated libpcap package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 30 Apr 2011 12:30:27 +0200
Source: libpcap
Binary: libpcap-dev libpcap0.8-dev libpcap0.8 libpcap0.8-dbg
Architecture: source all amd64
Version: 1.1.1-4
Distribution: unstable
Urgency: low
Maintainer: Romain Francoise <rfranco...@debian.org>
Changed-By: Romain Francoise <rfranco...@debian.org>
Description:
libpcap-dev - development library for libpcap (transitional package)
libpcap0.8 - system interface for user-level packet capture
libpcap0.8-dbg - debugging symbols for libpcap0.8
libpcap0.8-dev - development library and header files for libpcap0.8
Closes: 612803 623868
Changes:
libpcap (1.1.1-4) unstable; urgency=low
.
[ Romain Francoise ]
* Cherry-pick commit 073a8b37f9 from upstream to fix device detection
when the bonding module is loaded (closes: #612803).
* debian/patches/50_kfreebsd.diff: Enable zerocopy BPF again.
.
[ Robert S. Edmonds ]
* Backport commit ea9432fabd from upstream to fix corruption of snapshot
length on live captures (closes: #623868).
Checksums-Sha1:
cf0414efa52a10fb4b8155509f410469f652044d 1257 libpcap_1.1.1-4.dsc
2803a24594e28e9d212c997cd50b2447bd6997d7 16948 libpcap_1.1.1-4.debian.tar.gz
7b9dd8c109f0451017e88d2078d985b8f237333e 19710 libpcap-dev_1.1.1-4_all.deb
916f401fdf36e5d538a51b6402acf50307bade4a 234884
libpcap0.8-dev_1.1.1-4_amd64.deb
473c95a8706f20fa53fb10ec635529b37999846f 131230 libpcap0.8_1.1.1-4_amd64.deb
fa6011b8307b0454d9bbdc6c358d01e9e8cb57f5 155640
libpcap0.8-dbg_1.1.1-4_amd64.deb
Checksums-Sha256:
98c46337022b88b5dd502742810c6120bd6a4ea541be9017719296c615943388 1257
libpcap_1.1.1-4.dsc
168c62f7f6d96df70e49676ffd1b5162196fcad9f64b8c2a308e2d1866298454 16948
libpcap_1.1.1-4.debian.tar.gz
1d14b879199829a8bdb3956ecd1fa00d42101fcb18542653a2c99534e024109a 19710
libpcap-dev_1.1.1-4_all.deb
b0efa6abe0f3fbbf1a5309f8ef64ca0b6a17c1094bc07675d8a4ea86609b3b3b 234884
libpcap0.8-dev_1.1.1-4_amd64.deb
65c28b4b0701b640804f841cb446bfc4cb0dc31bf10143b30c8093b5ebb288d9 131230
libpcap0.8_1.1.1-4_amd64.deb
ecd646baa9d9a5041238023f931836408743b3aef41d2acd4e361ffc214f36e8 155640
libpcap0.8-dbg_1.1.1-4_amd64.deb
Files:
d43fc81a0bc5c56df50b6d4a9a3b005c 1257 devel optional libpcap_1.1.1-4.dsc
d973b914529ea90f2b7eac1d5095ed86 16948 devel optional
libpcap_1.1.1-4.debian.tar.gz
606f300d4491849302f5fc1bbea55a25 19710 libdevel optional
libpcap-dev_1.1.1-4_all.deb
0ad4bd27620f3163670c993ed8eb4995 234884 libdevel optional
libpcap0.8-dev_1.1.1-4_amd64.deb
95ddcf46ddcd029920a6ebf1feb10c0d 131230 libs optional
libpcap0.8_1.1.1-4_amd64.deb
5a9921d5eccc9360cbef05916df45061 155640 debug extra
libpcap0.8-dbg_1.1.1-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFNu+byogN2vsA8Vt8RAvfVAJ9gA06+39zrvxPYHe1kIhC90JF77QCgubeh
IAGUwuM2ZbiwNb3VNfBEm2I=
=8nQp
-----END PGP SIGNATURE-----
--- End Message ---
