Hi
I’m trying to open more than one pcap dump file similar to
the following:
m_pcapout =
pcap_open_dead(DEFAULT_DLT_TYPE, SNAPLEN)
…
m_phandle1 =
pcap_dump_open(m_pcapout, file1)
…
m_phandle1 =
pcap_dump_open(m_pcapout, file2)
…
m_phandle1 =
pcap_dump_open(m_pcapout, file3)
note: fname1,fname2
and fnam3 are all different.
What I find however is m_phandle1, m_phandle2, m_phandle3
all have the same value 0x1003D200. All pcap records written appear in only the
last dumpfile opened – i.e. file3. The symptoms seem to be that one handle is
being reopened/reused each time. Interestingly, for this example, file1
and file2 are both created and are 1K in size.
Looking at the source for pcap_dump_open() I cannot see why
this should not work. Am I missing some obvious point.
One further note: I am using winpcap version 4.1.2/4.1.3 on a
win7 machine and have tried the same executable on a winxp machine with
identical results.
Regards
mks
_______________________________________________
Winpcap-users mailing list
[email protected]
https://www.winpcap.org/mailman/listinfo/winpcap-users
