[Winpcap-users] snaplen in pcap_open_live

Gianluca Varenni gianluca.varenni at cacetech.com
Fri Sep 19 16:40:03 GMT 2008


Carlo, 

snaplen is used only if you use a capture filter, as the snaplen feature is implemented as a filter. This is the standard behavior of snaplen on libpcap/winpcap.

If you want to use snaplen and you don't need a filter, please compile an empty filter (i.e. the string "").

Have a nice day
GV
  ----- Original Message ----- 
  From: Carlo Medas 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, September 18, 2008 12:03 PM
  Subject: [Winpcap-users] snaplen in pcap_open_live


  Dears,


  I'm reporting a misbehaviour I encountered in both Windows Xp (SP3) and Windows Vista.


  Whatever value I provide as snaplen to pcap_open_live, it's ignored. Is it a normal behaviour?
  (I've tried it on Linux and it works perfectly as expected.)


  Thanks in advance.


  Best regards,


  Carlo Medas


------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080919/ebb12492/attachment-0001.htm


More information about the Winpcap-users mailing list