Hi. The snaplen is not set to any value when using the packet API, so you should receive the whole packet. the pcap API uses the snaplen when it compiles the bpf filters to filter packets in the kernel.
GV Why are you using the packet API instead of the pcap API? I advise you to read the "Important note" on the online documentation, http://winpcap.polito.it/docs/man/html/group__packetapi.html ----- Original Message ----- From: "Denis Lassoto" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 02, 2003 10:01 AM Subject: [WinPcap-users] truncated packets when using packet.dll > Hello, > > I am trying to develop a packet capture application using the packet.dll api > and I am running into a packet truncation problem. > I don't think it is linked to a capture performance issue as I am sending 4 > packets less than 100 bytes each to the application from a simulator to > highlight the problem. I always experience truncation with the 4th packet which > is truncated from 98 to 96 bytes. > I have not figured out how to define a paket capture length (snaplen) with the > packet.dll API, as this is possible with the libpcap one when calling > pcap_open_live. > > I cannot understand either how pcap_open_live makes use of the snaplen > parameter. it seems to use it to set the snapshot field if the pcap_t > structure, but I do not see where this field is being used. > > I use a kernel buffer of 512k and a user buffer of 256k.My code is running on > windows 2000. > > can anybody suggest a possible cause to this problem > Thanks > -- > Denis Lassoto > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED] > ================================================================== > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
