Re: [tcpdump-workers] capturing packets

2010-04-27 Thread Edgar, Thomas
Sorry all, ignore my last message. I sent it to the wrong mailing list on accident. Sorry, Thomas W. Edgar - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] capturing packets

2010-04-27 Thread Edgar, Thomas
I have a variable length protocol trailer (which is only known by the end devices) to parse and there is no way to figure it out during the framing process. Is there a way to determine how many bytes the subdissectors actually used after a return from dissector_try_port/heuristic? Is there som

Re: [tcpdump-workers] capturing packets

2010-04-27 Thread Gianluca Varenni
-- From: "Madhusudan KR" Sent: Tuesday, April 27, 2010 7:29 AM To: Subject: [tcpdump-workers] capturing packets Hi, I have a system which has two ethernet interfaces, namely eth0 and eth1. I need to capture the packets from both the interfaces

[tcpdump-workers] capturing packets

2010-04-27 Thread Madhusudan KR
Hi, I have a system which has two ethernet interfaces, namely eth0 and eth1. I need to capture the packets from both the interfaces. I am planning to spawn two threads, one each for eth0 and eth1. In these threads I shall be using the following two pcap calls. pcap_open_live pcap_next_ex I shal