[Winpcap-users] rpacpd terminates client connection

[Marc Andre, Andre-Netline]

Hi

I am trying to get rpcapd (4.0.2) running o a linux debian machine with
2.6 Kernel. I could compile the libpcap and rpcapd and it also starts
without problem (rpcapd -b <IP> -n). As soon as I connect (with
Wireshark or Analyze) I get the error message the the remote host as
disconnected and rpcapd shows the message "Child terminated". It looks
like the client thread is terminated immediately. I traced the problem
down to the pcap_close() function. The thread somewhere crashes in this
function. If I (for testing) disable the function call at one place it
works until the next time another pcap_close() is called.

Settings in Makefile:
PSRC =  pcap-linux.c
FSRC =  fad-getad.c

Does anybody know a solution? What kind of debugging should I do?

I also tried to get rpcapd (4.1 beta4) working, but I can't compile
libpcap:
./pcap-linux.c: In function 'pcap_create':
./pcap-linux.c:306: warning: passing argument 1 of
'pcap_opensource_remote' from incompatible pointer type
./pcap-linux.c:306: error: too many arguments to function
'pcap_opensource_remote'
./pcap-linux.c:306: warning: assignment makes pointer from integer
without a cast
./pcap-linux.c:311: error: 'snaplen' undeclared (first use in this function)
./pcap-linux.c:311: error: (Each undeclared identifier is reported only once
./pcap-linux.c:311: error: for each function it appears in.)
./pcap-linux.c:312: error: 'to_ms' undeclared (first use in this function)
./pcap-linux.c:313: error: 'promisc' undeclared (first use in this function)
./pcap-linux.c:323: error: 'p' undeclared (first use in this function)
make: *** [pcap-linux.o] Error 1

-Marc