Fw: Re: [Winpcap-users] Need help for capture packets on winxp box

yunshu at ph4nt0m.org yunshu at ph4nt0m.org
Thu May 25 14:14:13 GMT 2006


Hello,everyone.

The problem has been solved by Vasily Borovyak,he is so kind! Now,everybody can see
what a stupid mistake I made yesterday! haha~




yunshu at ph4nt0m.org
2006-05-25



发件人: Vasily Borovyak
发送时间: 2006-05-25 21:29:01
收件人: yunshu at ph4nt0m.org
抄送: 
主题: Re: [Winpcap-users] Need help for capture packets on winxp box

I made a deeper look. The problem I mention is the reason of your problem.

The size of ethernet header for IPv4 is always 14 bytes (6 bytes + 6 bytes + 2 bytes).
Your definition is 16+16+2=34 bytes long. And further in the code you're using sizeof keyword:

//get ip header
ipr = (IP_HDR *)(pchar+sizeof(ETH_HDR));

So ipr poiter points somewhere to the IP packet data but not to the header of it.
So simply change [16] to the [6].
I'm sure it will help.


I think the code you send us is not yours so you can't find the problem yourself. :)
And if you afraid if the buffer is not enough then you not understand
what the C programming language is. ;)

-- 
Best regards. Vasily Borovyak <vbor at isd.dp.ua>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20060525/935f083f/attachment.htm


More information about the Winpcap-users mailing list