On Dec 9, 2011, at 11:41 AM, Rick Jones wrote:
> I have some packet captures which were taken with a snaplen of 128 bytes, but
> I would like to convert that to one with a snaplen of say 66 bytes. The
> existing tcpdump/libpcap does not *seem* to do that - is there already a
> utility out the
Great news :-( Maybe I should ask my CTO to look at it.
GV
-Original Message-
From: tcpdump-workers-ow...@lists.tcpdump.org
[mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of Guy Harris
Sent: Friday, December 09, 2011 5:01 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re:
On Dec 6, 2011, at 5:47 PM, Gianluca Varenni wrote:
> It looks like there is a bug in the optimizer of the BPF compiler, both in
> 1.0 and trunk on git. If you try to compile the following filter,
> pcap_compile goes into some endless loop in bpf_optimize and never exits. If
> optimization is
I have some packet captures which were taken with a snaplen of 128
bytes, but I would like to convert that to one with a snaplen of say 66
bytes. The existing tcpdump/libpcap does not *seem* to do that - is
there already a utility out there which can, or is this an "enhancement
opportunity?"
