On Wed, 2004-04-21 at 17:09, Christian Kreibich wrote:
> pretty much harmless -- you'll just lose that incomplete last byte in
That should have been "packet", sorry.
Christian.
--
_
Hi,
in the pcap file format, each packet is prefixed by a little header
structure that tells pcap details about the following packet.
"truncated dump file" means that at the end of the trace, there's a pcap
packet header that states that a packet of a size follows that actually
is not fully conta
hello,
I am using tcpdump to capture packets from the netwok. I need to divide traces to
incoming and outgoing packets. So I wrote a filter file which contains IP adresses.
when I use the command : tcpdump -r tracefile.dump -F filterfile -w traceIn.dump, I
got the error message : pcap_loop:trun
On Tue, Apr 20, 2004 at 06:16:48PM -0700, Michael Richardson wrote:
> Darren> btw, is it at all easily possible to get the 802.3 checksum
> Darren> into captured data ?
>
> On some OSes you ask for that. Not on BSD AFAIK, yes, with PF_PACKET
> on Linux.
Some BSDs give it to you, at lea
CVS log entries from 20.04.2004 (Tue) 09:05:44 - 21.04.2004 (Wed) 09:05:56 GMT
=
Summary by authors
=
Author: guy
File: libpcap/pcap.3; Revisions: 1.62
==
