https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16116

--- Comment #17 from michal.pec...@telekom.sk ---
(In reply to Chuck Craft from comment #9)
> Can you load the 1.9.0 package? Looks like a big improvement.
> 
> # tcpdump --version
> tcpdump version 4.9.2
> libpcap version 1.8.1
> OpenSSL 1.0.2s  28 May 2019
> # tcpdump -i lo -d "vlan 545"
> (000) ldb      [-4048]
> (001) jeq      #0x1             jt 2    jf 5
> (002) ldb      [-4052]
> (003) jeq      #0x221           jt 4    jf 5
> (004) ret      #262144
> (005) ret      #0
> #
> 
> root@kali:~# tcpdump --version
> tcpdump version 4.9.3-PRE-GIT_2019_09_07
> libpcap version 1.9.0 (with TPACKET_V3)
> OpenSSL 1.1.1d  10 Sep 2019
> root@kali:~# tcpdump -i lo -d "vlan 545"
> (000) ldb      [-4048]
> (001) jeq      #0x1             jt 6    jf 2
> (002) ldh      [12]
> (003) jeq      #0x8100          jt 6    jf 4
> (004) jeq      #0x88a8          jt 6    jf 5
> (005) jeq      #0x9100          jt 6    jf 14
> (006) ldb      [-4048]
> (007) jeq      #0x1             jt 8    jf 10
> (008) ldb      [-4052]
> (009) ja       11
> (010) ldh      [14]
> (011) and      #0xfff
> (012) jeq      #0x221           jt 13   jf 14
> (013) ret      #262144
> (014) ret      #0
> root@kali:~#


I have manage to install new version of tcpdump which seems to work beter now
but the dumpcap seams unaffected.

user@tacmerak:~$ dumpcap -f "vlan 200" -d Capturing on 'enp0s31f6'
(000) ldb      [-4048]
(001) jeq      #0x1             jt 2    jf 5
(002) ldb      [-4052]
(003) jeq      #0xc8            jt 4    jf 5
(004) ret      #262144
(005) ret      #0
user@tacmerak:~$ tcpdump --version
tcpdump version 4.9.3
libpcap version 1.9.1 (with TPACKET_V3)
user@tacmerak:~$ sudo tcpdump  -d "vlan 545"
(000) ldb      [-4048]
(001) jeq      #0x1             jt 6    jf 2
(002) ldh      [12]
(003) jeq      #0x8100          jt 6    jf 4
(004) jeq      #0x88a8          jt 6    jf 5
(005) jeq      #0x9100          jt 6    jf 14
(006) ldb      [-4048]
(007) jeq      #0x1             jt 8    jf 10
(008) ldb      [-4052]
(009) ja       11
(010) ldh      [14]
(011) and      #0xfff
(012) jeq      #0x221           jt 13   jf 14
(013) ret      #262144
(014) ret      #0
user@tacmerak:~$

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to