When I send packets using queues, I notice something. In ethereal, the total number of bytes off the wire is, for instance, 92 bytes. However, when I put that same packet in a queue, I notice that caplen is (packetsize + 16) bytes all the time (in this case, it is 108 bytes). Why is this so?
I have dissected the packet into its Link-layer, header, data and trailer parts. Can I simply recombine these parts and shove the packet in a queue to send it? Thanks. ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
