tcpdump mailing list archives

libpcap , snaplen is set to a value but my packets in .pcap are cut shorter (no cooked device)


From: Laurent Debricon <laurent.debricon () gmail com>
Date: Fri, 25 Feb 2011 15:15:03 +0100

Hello,

I wrote a program using libpcap 1.1.1.
The problem is that I uses pcap_set_snaplen and if i set it to for exemple
120, pkt_hdr->caplen is set at max to 106

other exemple :
128 -> 122
120 -> 106
68 -> 58
64 -> 58
32 -> 26

Am i missing something ? (i don't use cooked device, it is from eth0 )

Regards,
Laurent.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: