Re: [tcpdump-workers] pcap_setdirection not working anymore?

2010-10-20 Thread Doktor Bernd
Ok, my problem is solved. The libpcap from Ubuntu (version 1.0. something) was interfering with my self compiled libpcap 1.1.1. Now I have removed the Ubuntu compiled version and everything is fine. So I think pcap_setdirection is not working in the Ubuntu packaged version, but compiling my own

Re: [tcpdump-workers] How to read a big pcap file?

2010-10-20 Thread Guy Harris
On Oct 20, 2010, at 2:01 AM, Subhasis Mohapatra (submohap) wrote: > Thanks for the information, > I was using an older version of libpcap. > > My pcap file is greater then 4GB and in Linux platform. Then you'll probably need libpcap 1.0.0 or later. > It was giving an error like "Unable to read

Re: [tcpdump-workers] How to read a big pcap file?

2010-10-20 Thread Subhasis Mohapatra (submohap)
Thanks for the information, I was using an older version of libpcap. My pcap file is greater then 4GB and in Linux platform. It was giving an error like "Unable to read the pcap file". Thanks, Subhasis -Original Message- From: tcpdump-workers-ow...@lists.tcpdump.org [mailto:tcpdump-worke

Re: [tcpdump-workers] How to read a big pcap file?

2010-10-20 Thread Guy Harris
On Oct 19, 2010, at 5:52 AM, Subhasis Mohapatra (submohap) wrote: > I have designed a tool using libpcap,but its not reading big pcaps. What does "big" mean here? Larger than 2GB, larger than 4GB, or larger than some other value? What happens if your tool tries to read a big pcap file? What