I have recently started experimenting with libpcap, and I have noticed a few things. Please let me know if it is system or operator error.
I am working on Linux 7.1 with 2.4. kernel, and the current libpcap. I've built a sniffer based on libpcap, but I am having problems with large packets. For example, when I execute the following ping command while monitoring the results with my app, tcpdump, and snort, I get all the packets as expected. ping localhost -s 30000 -c 1 But if I increase the size to 35000, I begin to loose the 0 offset packet. If I increase it to 60000, I get zero packets. The results are the same for all three applications. Has anyone found similar problems? Your help is greatly appreciated. Rob - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
