I have written a program (using winpcap api) to read tcp packets offline from a tcpdump file (MIT DARPA datasets). I am using the functions pcap_open_offline and pcap_next_ex to read the packets from the tcpdump file. The tcpdump file that I am using is around 128MB. After reading some packets (around 6000), the functiion pcap_next_ex terminates with an error "truncated dump file". My program seems to work well on another smaller (2.5MB) tcpdump file. I am not able to figure out the problem. Can anyone please help me out with this.

_________________________________________________________________
Nagesh Kukunoor's back! With 3 Deewarein. http://server1.msn.co.in/sp03/3deewarein/index.asp Win tickets here.




==================================================================
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/[EMAIL PROTECTED]/

To unsubscribe use mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to