Re: [tcpdump-workers] PCAP - IP Fragments

2004-07-01 Thread Hans Klute
> In some email I received from Hans Klute, sie wrote: > [ Charset ISO-8859-1 unsupported, converting... ] > > Hi! > > > > I just realized a bug/feature of pcap that I didn?t think of. > > I wrote a sniffer based on pcap. This sniffer can handle fragmented IP >

[tcpdump-workers] PCAP - IP Fragments

2004-06-29 Thread Hans Klute
Hi! I just realized a bug/feature of pcap that I didn´t think of. I wrote a sniffer based on pcap. This sniffer can handle fragmented IP packets. Now I realized that if you set up a filter with a UDP or TCP port, you will not get the additional fragments, because in these packets there are no UDP/

Re: [tcpdump-workers] PCAP performance

2004-04-02 Thread Hans Klute
> On Thu, Apr 01, 2004 at 02:12:35PM +0200, Hans Klute wrote: > > Now I have noticed that about every 3 minutes and 15 seconds the Program > > uses 100 % of the CPU. > > After about 45 sec the program works normal again and uses only 10% of > the > > CPU time. >

Re: [tcpdump-workers] PCAP performance

2004-04-01 Thread Hans Klute
> > I have written a packet sniffer under C++ using libpcap. > > Now I have noticed that about every 3 minutes and 15 seconds the Program > > uses 100 % of the CPU. > > After about 45 sec the program works normal again and uses only 10% of > the > > CPU time. > > Sure sounds like a problem with yo

[tcpdump-workers] PCAP performance

2004-04-01 Thread Hans Klute
IP-Addresses and Ports. Please help Hans Klute -- +++ NEU bei GMX und erstmalig in Deutschland: TÜV-geprüfter Virenschutz +++ 100% Virenerkennung nach Wildlist. Infos: http://www.gmx.net/virenschutz - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.