libpcap file size limit

[dloose () WPI EDU]

Hi everyone. I did a Google search for this problem and uncovered a wealth
of information about the it, but not very much on how to fix it, so here I
am.

I have two rather large (~1.5GB each) capture files that I need to merge
into one.  The program I'm using runs for a bit and then stops with a
"maximum file size exceeded" error.  The size of the file it writes to is
2^31-1 bytes, so clearly I'm hitting the 2GB limit.

I'm doing this on a Gentoo Linux machine that has a recent 2.4 kernel (I
don't know which one 'cause I'm at work right now).  Running `ulimit`
outputs "unlimited".

Is there a workaround of some kind that will let libpcap handle larger
files?  Some of the info I turned up seemed to suggest that there is a
configuration option that will compile libpcap with large file support,
but I can't seem to find it.

I'm not afraid of recompiling my entire system if that's what it takes, so
any solutions to this little conundrum are welcome :)

Thanks,

Dave

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe