Re: [tcpdump-workers] Coredump Without Much Info?

2015-07-10 Thread Hei Chan
(gdb) disassemble pcap_nextDump of assembler code for function pcap_next:    0x7715a040 +0: sub    $0x28,%rsp= 0x7715a044 +4: mov     0x260(%rdi),%rdx   0x7715a04b +11: lea    0x18(%rsp),%rax    0x7715a050 +16: mov    %rsi,(%rsp)   0x7715a054 +20: mov    

Re: [tcpdump-workers] Coredump Without Much Info?

2015-07-10 Thread Guy Harris
On Jul 10, 2015, at 10:41 AM, Hei Chan structurech...@yahoo.com wrote: Thanks for your quick reply. Here is my code: pcap_t* m_pPcap; char *packet; struct pcap_pkthdr header; m_pPcap = pcap_open_offline(pcapFile, errbuf);

[tcpdump-workers] Coredump Without Much Info?

2015-07-10 Thread Hei Chan
Hi, I am using libpcap 1.4.0 to read in pcap. And my application crashed at pcap_next() when it read the first packet from my pcap file:(gdb) bt#0  0x7715a044 in pcap_next () from /usr/lib64/libpcap.so.1 I used wireshark to open the pcap and wireshark doesn't show any error (e.g. no

Re: [tcpdump-workers] Coredump Without Much Info?

2015-07-10 Thread Hei Chan
Thanks for your quick reply. Here is my code:pcap_t* m_pPcap; char *packet; struct pcap_pkthdr header; m_pPcap = pcap_open_offline(pcapFile, errbuf); if (pcapFile == NULL) {  exit(1); } while ((packet = (char*) pcap_next(m_pPcap, header)) != NULL) {// do my stuffs here...} The code above

Re: [tcpdump-workers] Coredump Without Much Info?

2015-07-10 Thread Guy Harris
On Jul 10, 2015, at 7:53 AM, Hei Chan structurech...@yahoo.com wrote: I am using libpcap 1.4.0 to read in pcap. And my application crashed at pcap_next() when it read the first packet from my pcap file:(gdb) bt#0 0x7715a044 in pcap_next () from /usr/lib64/libpcap.so.1 I used

Re: [tcpdump-workers] Coredump Without Much Info?

2015-07-10 Thread Guy Harris
On Jul 10, 2015, at 7:53 AM, Hei Chan structurech...@yahoo.com wrote: I am using libpcap 1.4.0 to read in pcap. And my application crashed at pcap_next() when it read the first packet from my pcap file:(gdb) bt#0 0x7715a044 in pcap_next () from /usr/lib64/libpcap.so.1 What does