Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Edward Smirnov
Hello Guy, GH> ...unless you're running on a Win32 system, using WinPcap, in GH> which case, as far as I know, when the process exits, the OS GH> reclaims the address space, just as it does on UN*X, and you don't GH> have a problem. Agree. Try our tcpdump for Windows, and try to detect any memor

Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Guy Harris
Michael Richardson wrote: On a Unix (POSIX?) system, when the process exits, then the operating system reclaims all resources. If you aren't running on such a system, then yes, you probably have a problem. ...unless you're running on a Win32 system, using WinPcap, in which case, as far as I know

Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- > "Manoj" == Manoj Kumar <[EMAIL PROTECTED]> writes: Manoj> libpcap does not have "exit()" and libc "exit()" cannot Manoj> release the memory allocated in heap.Only "free()" can Manoj> release memmory from heap. Memory allocated via "malloc" is

Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Gert Doering
Hi, On Tue, Mar 22, 2005 at 07:00:15PM +0530, Manoj Kumar wrote: > libpcap does not have "exit()" and libc "exit()" cannot release the > memory allocated in heap.Only "free()" can release memmory from heap. > Memory allocated via "malloc" is accounted in heap section of process > memory, and "pcap

Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Manoj Kumar
libpcap does not have "exit()" and libc "exit()" cannot release the memory allocated in heap.Only "free()" can release memmory from heap. Memory allocated via "malloc" is accounted in heap section of process memory, and "pcap_complie()" does "malloc". Thus with "malloc" , "free" is necessary. Pl

Re: [tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Guy Harris
Manoj Kumar wrote: I was learning how to go about writting sniffer using libpcap. For the reason i was going through code of tcpdump version 3.8.3 code (which indeed helped me alot), and i think there is some memory leak in tcpdump when used with filters. As tcpdump uses 'pcap_compile()' , which e

[tcpdump-workers] TCPDUMP version 3.8.3

2005-03-22 Thread Manoj Kumar
HI, I was learning how to go about writting sniffer using libpcap. For the reason i was going through code of tcpdump version 3.8.3 code (which indeed helped me alot), and i think there is some memory leak in tcpdump when used with filters. As tcpdump uses 'pcap_compile()' , which eventually does