tcpdump mailing list archives
libpcap , snaplen is set to a value but my packets in .pcap are cut shorter (no cooked device)
From: Laurent Debricon <laurent.debricon () gmail com>
Date: Fri, 25 Feb 2011 15:15:03 +0100
Hello, I wrote a program using libpcap 1.1.1. The problem is that I uses pcap_set_snaplen and if i set it to for exemple 120, pkt_hdr->caplen is set at max to 106 other exemple : 128 -> 122 120 -> 106 68 -> 58 64 -> 58 32 -> 26 Am i missing something ? (i don't use cooked device, it is from eth0 ) Regards, Laurent. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- libpcap , snaplen is set to a value but my packets in .pcap are cut shorter (no cooked device) Laurent Debricon (Feb 25)