[tcpdump-workers] [PATCH 2/2] Debug: pcap-linux.c: fprintf() values related to req.tp_frame_size.

From: Julien Moutinho --- pcap-linux.c | 33 +++-- 1 files changed, 31 insertions(+), 2 deletions(-) diff --git a/pcap-linux.c b/pcap-linux.c index 1542fad..c896584 100644 --- a/pcap-linux.c +++ b/pcap-linux.c @@ -1429,6 +1429,7 @@ pcap_read_packet(pcap_t *handle,

[tcpdump-workers] [PATCH 1/2] Fix: pcap-linux.c: create_ring(): calibrate req.tp_frame_size as in tpacket_rcv() (almost).

From: Julien Moutinho Symptom is a capture where caplen < len <= snaplen. For instance to reproduce: % sudo tcpdump -U -w /tmp/lo.pcap -s 128 -i lo -n ip & tcpdump: listening on lo, link-type EN10MB (Ethernet), capture size 128 bytes % ping -c 1 -s $((-20-8+128)) 127.0.0.

[tcpdump-workers] [bug] [libpcap] pcap-linux.c: PACKET_MMAP: caplen < len <= snaplen.

Hi there, following is a patch trying to fix the bug described here: http://article.gmane.org/gmane.network.tcpdump.devel/4968 plus another patch FYI only which helped me to debug. read the comments to know more. you may also retrieve the patches with: % git fetch git://195.88.84.18/~jul