Re: Handling Corrupted Packets Inside Pcap Files?

[Hei Chan <structurechart () yahoo com>]

Argh, nevermind.

I think the corrupted packet caused my application to have some invalid read/write, corrupting something pcap_next() is 
going to use and so I thought it crashed inside pcap_next().

Sorry for the false alarm.


On Thursday, October 23, 2014 2:14 AM, Guy Harris <guy () alum mit edu> wrote:

On Oct 18, 2014, at 4:12 AM, Hei Chan <structurechart () yahoo com> wrote:

> Hi,
> The first 3 packets are corrupted according to wireshark.

What is the exact message Wireshark reports?

Can you send us the pcap file or make it available for downloading?




> As soon as I read the first packet with pcap_next(), my application gets a coredump.


Is it crashing in pcap_next(), or is it crashing in your application's code?

Could we see your application's code?

If it's crashing in pcap_next(), what is the stack trace from the crash? 
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers