Re: some problem in the source code

[Guy Harris <guy () alum mit edu>]

aman Reddy wrote:

> But when I assign either eth0 or eth1 is working fine , I am able to capture correct
> packets: But I fail to understand why I am getting corrupt packets if "any" or NULL is set

You're *not* getting corrupt packets.

You're getting packets that don't have an Ethernet header on them, 
because the "any" device means "capture on all devices", and it's not 
necessarily the case that all devices are Ethernet devices (libpcap 
doesn't enumerate the devices and check whether they're all the same 
type and treat that as a special case for the "any" device - I'm not 
sure that'd work in any case, as I think new devices might be able to 
appear, e.g. tunnels and PPP devices).
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.