[Winpcap-users] snaplen in pcap_open_live

Gianluca Varenni gianluca.varenni at cacetech.com
Fri Sep 19 16:40:03 GMT 2008


snaplen is used only if you use a capture filter, as the snaplen feature is implemented as a filter. This is the standard behavior of snaplen on libpcap/winpcap.

If you want to use snaplen and you don't need a filter, please compile an empty filter (i.e. the string "").

Have a nice day
  ----- Original Message ----- 
  From: Carlo Medas 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, September 18, 2008 12:03 PM
  Subject: [Winpcap-users] snaplen in pcap_open_live


  I'm reporting a misbehaviour I encountered in both Windows Xp (SP3) and Windows Vista.

  Whatever value I provide as snaplen to pcap_open_live, it's ignored. Is it a normal behaviour?
  (I've tried it on Linux and it works perfectly as expected.)

  Thanks in advance.

  Best regards,

  Carlo Medas


  Winpcap-users mailing list
  Winpcap-users at winpcap.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080919/ebb12492/attachment-0001.htm

More information about the Winpcap-users mailing list