Re: [Patch/Workaround?] pcap-usb-linux.c

[Jean-Louis <jelot-tcpdump () jelot it>]

Tyson Key ha scritto:
> Hi Jean-Louis, just applied the patches and it compiles and installs
> successfully.
> Still looks like certain packets are being truncated (mostly URB_ISOCHRONOUS
> ones from what I can tell).
> Thanks.

now also the mmap mode have snaplen limitation...

try to capture traffic with -s 0 tcpdump option.

i.e. tcpdump -i2 -w file.pcap -s 0

if you would make default maximum, look #DEFINE of DEFAULT_SNAPLEN
in tcpdump/interface.h and tcpdump/netdissect.h

I have found this with

find -name "*.[ch]" | xargs grep "DEFAULT_SNAPLEN"
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.