On May 31, 2011, at 7:36 AM, mold2010 wrote: > I have a problem about libpcap ring buffer. The problem is the packets > captured by libpcap1.1.1 which uses ring > buffer are truncated.
Does this happen with the current top-of-tree libpcap (regardless of the version of tcpdump with which it was linked; tcpdump and libpcap are released together, but tcpdump is supposed to be able to run with versions of libpcap other than the one released with it)? The trunk and the 1.2 branch have some ring buffer changes to fix some problems such as that.- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
