> I'm now "playing" with ssldump:
> ERROR: Length mismatch
>
> Do any of the postfix guru out there have a clue about what's going on ?
According to ssldump source code:
void pcap_cb(ptr,hdr,data)
u_char *ptr;
struct pcap_pkthdr *hdr;
u_char *data;
{
n_handler *n;
...
n=(n_handler *)ptr;
if(hdr->caplen!=hdr->len) err_exit("Length mismatch",-1);
The "struct pcap_pkthdr" members are documented as:
caplen a bpf_u_int32 giving the number of bytes of the packet
that are available from the capture
I.e. what is captured with tcpdump.
len a bpf_u_int32 giving the length of the packet, in bytes
(which might be more than the number of bytes available
from the capture, if the length of the packet is larger
than the maximum number of bytes to capture).
I.e. what was actually sent on the network.
You need to capture complete network packets, not just the first part.
For example, if capturing with tcpdump you would use "tcpdump -s 0".
Wietse
