On Apr 19, 2011, at 9:15 AM, Sam Roberts wrote:
> Does anybody here know what causes this? Am I calling libpcap
> incorrectly?
Yes:
>int snaplen = 0;
...
>pcap_t* cap = pcap_open_live(source, snaplen, promisc, to_ms, errbuf);
A snapshot length of 0, in libpcap, doesn't mean "
Checked into the trunk and 4.2 branches.
(Michael, do you want some regression tests, i.e. a sample capture or captures
and the corresponding tcpdump output?)
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
On Wed, 2011-04-27 at 15:21 -0400, Michael Richardson wrote:
> Rick, I've committed your pcap file and .out file.
> I edited the out file to remove the dates (-t option), and I suggest you
> want to generate one file for each -v level.
>
> It's pretty important for me to have the .pcap and .out f
On Apr 27, 2011, at 12:07 PM, Michael Richardson wrote:
> I wrote some code C++, which I have placed under a do-anything license,
> which disguishes between EN10B and LINKTYPE_LINUX_SLL/DLT_LINUX_SLL.
I think there's another libpcap-based program out there that includes code to
distinguish betw
