The final stats count in libpcap 0.7.1 is faulty. It was OK in 0.6.x. ie:
% tcpdump -w test.bin
10000 packets received
200 packets dropped at kernel
# libpcap says 10200 packets total when only 10000 was transmitted.
# should have been 9800 received, 200 dropped.
% cntPkts -r test.bin
pktCnt:9800
The dropped count is not being subtracted from the received count.
Packet count was being confirmed with a smartbits tester on a closed net.
Joe.
--
__o _~o __o
`\<, `\<, `\<,
______________________________________(*)/_(*)__(*)/_(*)__(*)/_(*)________
Im a 21st Century Digital Boy ... I aint got a life, but I got lotsa toys.
******************* Joe Elliott [EMAIL PROTECTED] ********************
Phone:(650)961-6631 Cell:(650)714-3932 Inetd.Com http://inetd.com
--------------------------------------------------------------------------
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
