Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Michal Sekletar
On Mon, Nov 18, 2013 at 12:38:24AM -0500, Benjamin Vanheuverzwijn wrote: > Hi, Hi Benjamin, > > libpcap version: 1.4.0 (on archlinux) I am running Fedora 19 (libpcap-1.4.0). > > Is it possible to have multiple call to "pcap_open_live()" followed by > pcap_close() ? It shouldn't be a problem

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Benjamin Vanheuverzwijn
On Mon, Nov 18, 2013 at 12:15 PM, Michal Sekletar wrote: > On Mon, Nov 18, 2013 at 12:38:24AM -0500, Benjamin Vanheuverzwijn wrote: > > Hi, > > Hi Benjamin, > Hi, thanks for your reply! > > > > > libpcap version: 1.4.0 (on archlinux) > > I am running Fedora 19 (libpcap-1.4.0). > > > > > Is it p

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Benjamin Vanheuverzwijn
I've attached a list of opened files while i'm running "bug", they're mostly pipes. I was running on Linux 3.11.6, just upgraded to 3.12.0 and the same problem occur. -- Benjamin Vanheuverzwijn ___ tcpdump-workers mailing list tcpdump-workers@lists.tcp

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Guy Harris
On Nov 17, 2013, at 9:38 PM, Benjamin Vanheuverzwijn wrote: > libpcap version: 1.4.0 (on archlinux) > > Is it possible to have multiple call to "pcap_open_live()" followed by > pcap_close() ? Yes, modulo bugs in libpcap or libraries it uses. > It seems like pcap_close() doesn't cleanly close

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Benjamin Vanheuverzwijn
On Mon, Nov 18, 2013 at 4:22 PM, Guy Harris wrote: > > On Nov 17, 2013, at 9:38 PM, Benjamin Vanheuverzwijn > wrote: > > > libpcap version: 1.4.0 (on archlinux) > > > > Is it possible to have multiple call to "pcap_open_live()" followed by > > pcap_close() ? > > Yes, modulo bugs in libpcap or li

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Guy Harris
On Nov 18, 2013, at 2:06 PM, Benjamin Vanheuverzwijn wrote: > I've just tested against libpcap commit > 11031d0f71387161c282248cddc2fa0f7bf014ce (Mon Nov 11 11:21:43 2013 -0800) > that i got from here https://github.com/the-tcpdump-group/libpcap.git and the > problem still exists. It's still

Re: [tcpdump-workers] Multiple call to pcap_open_live

2013-11-18 Thread Benjamin Vanheuverzwijn
On Mon, Nov 18, 2013 at 5:14 PM, Guy Harris wrote: > > On Nov 18, 2013, at 2:06 PM, Benjamin Vanheuverzwijn > wrote: > > > I've just tested against libpcap commit > 11031d0f71387161c282248cddc2fa0f7bf014ce (Mon Nov 11 11:21:43 2013 -0800) > that i got from here https://github.com/the-tcpdump-gro