[tcpdump-workers] pcap_inject troubleshooting

2009-01-12 Thread David Murray
Hi, I am writing an application using the libpcap library that is capable of caching and replaying frames. I originally wrote and tested this program using a embedded ALIX system that runs a 500Mhz Geode processor. I felt that the slow performance of this CPU was causing a few problems so I d

Re: [tcpdump-workers] pcap_inject troubleshooting

2009-01-12 Thread Guy Harris
On Jan 12, 2009, at 8:44 PM, David Murray wrote: I am writing an application using the libpcap library that is capable of caching and replaying frames. I originally wrote and tested this program using a embedded ALIX system that runs a 500Mhz Geode processor. I felt that the slow performan

[tcpdump-workers] Troubleshooting pcap_inject

2009-01-12 Thread David Murray
Hi, I am writing a little pcap program that is capable of caching and replaying packets. I was originally running the program on a little embedded x86 AMD Geode but as I was a little concerned with performance I decided I would like to see the difference when running on a desktop. So, I moved

Re: [tcpdump-workers] Troubleshooting pcap_inject

2009-01-12 Thread Guy Harris
On Jan 12, 2009, at 8:31 PM, David Murray wrote: Perhaps an important difference between the two systems is that on the ALIX embedded system, packet injection is happening over a WiFi NIC whereas on the desktop system packet injection is happening on the Desktop NIC. Yes. See my earlier

Re: [tcpdump-workers] pcap_inject troubleshooting

2009-01-12 Thread David Murray
Quoting Guy Harris : I'm assuming your wired NICs are Ethernet NICs; the maximum payload size for Ethernet is 1500 bytes. The maximum payload size for IEEE 802.11 is 2304 bytes, at least according to IEEE 802.11-1999: 6.2.1.1.2 Semantics of the service primitive ...

Re: [tcpdump-workers] pcap_inject troubleshooting

2009-01-12 Thread Guy Harris
On Jan 12, 2009, at 9:05 PM, David Murray wrote: Good point. However, the packets that I am capturing are going end-to-end and they are being replayed to the same receiver. Subsequently, the payload size of the frame should be less than 1500. What *is* the payload size of a frame that's not b

Re: [tcpdump-workers] Troubleshooting pcap_inject

2009-01-12 Thread David Murray
Quoting Guy Harris : On Jan 12, 2009, at 8:31 PM, David Murray wrote: Perhaps an important difference between the two systems is that on the ALIX embedded system, packet injection is happening over a WiFi NIC whereas on the desktop system packet injection is happening on the Desktop NIC.

[tcpdump-workers]tcpdum lose packets

2009-01-12 Thread liu . yongfeng
I use tcpdump to capture the packets of one RTP stream in my rtsp server,by the RTP sequence number,i found some packets had lost. but in the client that conneted to this server in the same time ,use tcpdump capture the packets of this RTP stream,i do not found lost packet.i don't konw why? som