Re: [tcpdump-workers] Libpcap recieves partial packets (pcap_pkthdr.caplen

2012-05-09 Thread Michael Richardson
> "Hrju" == Hrju Blja writes: Hrju> Hi, I develop a Linux sniffer application , which uses libpcap Hrju> 1.2.0 library. The problem is that on some 2.6.16 and 2.4 Hrju> kernel machines, which are pretty much "usual", SOMETIMES SOME Hrju> packets are captured partially, i.e.

[tcpdump-workers] Libpcap recieves partial packets (pcap_pkthdr.caplen

2012-05-08 Thread Hrju Blja
Hi, I develop a Linux sniffer application , which uses libpcap 1.2.0 library. The problem is that on some 2.6.16 and 2.4 kernel machines, which are pretty much "usual", SOMETIMES SOME packets are captured partially, i.e. tpacket_hdr structure tp_snaplen value is less then tp_len value. I see this r