> Maybe someone of you know what to do to solve the problem.
Step 1: make sure your program really *is* linked with a version of
libpcap that's actually based on libpcap 0.6.2; there is a bug in older
versions of libpcap in which the lexical analyzer can, if the parse is
cut short by an error, not purge its input stream of tokens, so that the
first token seen by the next call to "pcap_compile()" is left over from
the previous parse.
That bug is fixed in 0.6.2. If you downloaded 0.6.2 source from
tcpdump.org, and built that version, make sure you link with the library
you built, *not* with the library that came with the OS - give an
explicit path to the ".a" version of the library, if necessary, so that
it's *statically* linked with a version built from 0.6.2 source - and
then test again.
I tried it with current CVS source (which shouldn't differ from 0.6.2
source in this regard), explicitly linking with the "libpcap.a" in th
same directory, and got
Filter: host 192.168.2.1
0
Filter: hott 192.168.2.1
parse error
2
Filter: host 192.168.2.1
0
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
