Hi,
Im capturing packets under win 2000 sp2 with
pcap_open_live(). Timeout is 10, promicous mode is 1,
capture len is 60.
Packets are read with pcap_read_ex(). I have also set up a filter.
After capturing a while under heavy load (> 30s) the pcap_read_ex()
ret value is continous 0, aka timeout. But there are packets which should be
captured.
I've done some testing with windump.
Windump stops also capturing after a while.
(As last line, the last packet captured is on the screen)
I'v tried with or without filter. I've tried on 2 computers
(pentium 2 notebook and athlon 1,3) both win 2000. The same problem.
When I start another capture instance, then this new instance captures a
while and then it shows endless hex code lines (cut). This looks like
the unparsed packet contents.
12:43:07.942632 IP GF02619.1374 > whiskas.2009: P 7745300:7746760(1460) ack 1 win
17520 (DF)
12:43:07.943935 IP GF02619.1374 > whiskas.2009: P 7746760:7748220(1460) ack 1 win
17520 (DF)
20:13:30.1515870810 40:0:80:6:92:67 45:0:5:dc:e1:58 c0a8 1515870810:
0006 c0a8 0005 055e 07d9 789f 4e50 a74a
1e23 5018 4470 a512 0000 5a5a 5a5a 5a5a
5a5a 5a5a 5a5a 5a5a 5a5a 5a5a 5a5a 5a5a
5a5a 5a5a 5a5a 5a5a 5a5a 5a5a 5a5a 5a5a
5a5a 5a5a cc0c e23d d32d 0300 3600 0000
3600 0000 1400 5a5a 0010 a4d2 beec 0060
b0f8 9de8 0800 4500 0028 3b52 4000 8006
3e22 c0a8 0005 c0a8 0006 07d9 055e a74a
1e23 789f 5404 5010 4470 4ac0 0000 5a5a
The packets captured are tcp packet generated from a packet generator.
Packet size 1460, inter packet delay 0 or 1 ms (random). packet content
"5A" hex.
This sounds like a bug?
Any hints?
Gruss,
Kai Olbrich
==================================================================
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/[email protected]/
To unsubscribe use
mailto: [EMAIL PROTECTED]?body=unsubscribe
==================================================================
