[Winpcap-users] I can't seem to read more than 16 bytes from anoffline file

Gianluca Varenni gianluca.varenni at cacetech.com
Fri Oct 12 23:49:17 GMT 2007


I can't seem to read more than 16 bytes from an offline fileDoes wireshark/ethereal open the same file properly?

Have a nice day
GV


  ----- Original Message ----- 
  From: Isaacks, John H 
  To: winpcap-users at winpcap.org 
  Sent: Friday, October 12, 2007 2:01 PM
  Subject: [Winpcap-users] I can't seem to read more than 16 bytes from anoffline file




  I'm trying to read a captured ethereal file ( pcap ). 
  My code used to work fine, but now doesn't work on any of my machines. 
  I was using 3.1 but I have installed lastest 4.0.1 on my pc and I get the same results as before. 
  I have reverted to simple readfile.c example and the const struct pcap_pkthdr *header->caplen is always 16 bytes ( 0x10 )

  I even tried the readfile_ex.c version and I get the same 16 bytes as the caplen. 



  John Isaacks 
  EDS - ITMS Production support 
  MS 216 
  3450 Lakeside Dr 
  Miramar, FL  33027-3277 

   Phone:+1-954-433-6653 
  + mailto:john.isaacks at eds.com 





------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20071012/cb3391d3/attachment.htm


More information about the Winpcap-users mailing list