Jean-Louis ha scritto:
today I have found some bug on pcap-usb-linux.c
now i can try to tell you which are
in accordance with usbmon.txt in "mmap mode" the data is at
&mmap_area[vec[i]] + 64;
rather than
&mmap_area[vec[i]] + 48;
with mmap ther'is 16Byte filled with 0 first to the real data...
so if i.e. I have caplen = 18Byte, in file.pcap I have 16Byte with
garbage (0x00) and only 2Byte with real data other 16Byte of real data
is lost.
the mmap mode is *default* with kernel >= 2.6.25-rc8-mm1
I'm newbie with libpcap and I don't know how I can fix that without
degrading performance
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
