Tran,

In addition to what G. said about multiple ethernet packets per TDS message 
(which is true, usually 3 ethernet packets per full TDS message), did you set 
the 'snaplen' of pcap_open_live() to 65536?  If not, you may only be getting a 
portion of the actual ethernet packet.

DC
  ----- Original Message ----- 
  From: tran thanh 
  To: [email protected] 
  Sent: Thursday, July 23, 2009 3:04 AM
  Subject: [Winpcap-users] Size of packet captured!


  Dear all, 
  I'm using winpcap to capture 'SQL Batch Server Response'!
  When I received a packet from sqlserver, the size of the packet is too short, 
  so I can get all the data that the server response.

  Ex: I use 
  Select FirstName, MiddleName, LastName from Employees
  There are total 300 DataRows but I only receive 240 DataRows.

  Please help me about this.

  Thanks and Regard!



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  [email protected]
  https://www.winpcap.org/mailman/listinfo/winpcap-users
_______________________________________________
Winpcap-users mailing list
[email protected]
https://www.winpcap.org/mailman/listinfo/winpcap-users

Reply via email to