Re: [tcpdump-workers] Libpcap And snap_len

2010-12-11 Thread Guy Harris
On Dec 11, 2010, at 4:35 AM, Vikram Roopchand wrote: > We have been using Libpcap 1.1.1 heavily On what operating system are you using it? The code used for capturing is very different on different OSes. > and noticed > something of the following nature. It seems that during

[tcpdump-workers] Libpcap And snap_len

2010-12-11 Thread Vikram Roopchand
Hello There, We have been using Libpcap 1.1.1 heavily and noticed something of the following nature. It seems that during a packet read, internal buffer to read each segment is allocated a size of "snap_len" bytes. This is okay since we do not know how many bytes will arrive so it