Hello, I'm developing an IP packet sniffer tool and have run into an apparent problem, possibly with pcap_loop. Two NICs are hooked into a CISCO ethernet switch. The lines are both monitoring 1 ethernet switch port. So, in essence, two packets with the same ID (ip_id) extracted from the ip structure (see ip.h) are basically the same exact packet read at the same time by both lines. When compared, the two sniffers reporting the unique packet match up the first couple hundred or so bytes of data. After that, all bytes are inconsistant and apparantly random.
We reloaded the pcap library to 0.6.2. Now the issue is the sniffers compared the unique packet exactly, except all bytes after the 100th byte or so are 0's. Any known bugs? Versions CISCO Catalyst 2900 ethernet switch software version 11.2 Linux 2.4.18-6mdk on a Dell KDE desktop 2.2.2 KDevelop 2.1beta Thanks - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
