<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>I can't seem to read more than 16 bytes from an offline file</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<BR>
<P><FONT SIZE=2 FACE="Arial">I'm trying to read a captured ethereal file ( pcap ).</FONT>
<BR><FONT SIZE=2 FACE="Arial">My code used to work fine, but now doesn't work on any of my machines.</FONT>
<BR><FONT SIZE=2 FACE="Arial">I was using 3.1 but I have installed lastest 4.0.1 on my pc and I get the same results as before.</FONT>
<BR><FONT SIZE=2 FACE="Arial">I have reverted to simple readfile.c example and the</FONT> <FONT COLOR="#0000FF" SIZE=2 FACE="Courier New">const</FONT><FONT SIZE=2 FACE="Courier New"> </FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Courier New">struct</FONT><FONT SIZE=2 FACE="Courier New"> pcap_pkthdr *header->caplen is always 16 bytes ( 0x10 )</FONT></P>
<P><FONT SIZE=2 FACE="Arial">I even tried the readfile_ex.c version and I get the same 16 bytes as the caplen.</FONT>
</P>
<BR>
<P><FONT SIZE=4 FACE="Arial">John Isaacks</FONT>
<BR><FONT SIZE=2 FACE="Arial">EDS - ITMS Production support</FONT>
<BR><FONT SIZE=2 FACE="Arial">MS 216</FONT>
<BR><FONT SIZE=2 FACE="Arial">3450 Lakeside Dr</FONT>
<BR><FONT SIZE=2 FACE="Arial">Miramar, FL 33027-3277</FONT>
</P>
<P><FONT FACE="Arial"> </FONT><FONT SIZE=2 FACE="Arial">Phone:+1-954-433-6653</FONT>
<BR><FONT SIZE=2 FACE="Arial">+</FONT> <A HREF="mailto:john.isaacks@eds.com"><U><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">mailto:john.isaacks@eds.com</FONT></U></A>
</P>
<BR>
</BODY>
</HTML>