Are you setting a filter? What snaplen are you setting in pcap_open_live? Have you programs like firewalls or PGPNet on the machine?
> Hi, > I developed an tcp traffic analysis application using Winpcap 2.3. It works > fine under Win2000, but I got a problem under WinNT w/ SP4 or SP6. > > When I check the header of the packet I got, I found there's a mismatch > between caplen (captured length) and len (packet length), and the caplen is > always one byte less than len. > > Is there anyone who encountered this problem? > > Thanks in advance, > Wayne >
