[Winpcap-users] Size of packet captured!

[David Chang]

Tran,

In addition to what G. said about multiple ethernet packets per TDS message (which is true, usually 3 ethernet packets per full TDS message), did you set the 'snaplen' of pcap_open_live() to 65536?  If not, you may only be getting a portion of the actual ethernet packet.

DC
  ----- Original Message ----- 
  From: tran thanh 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, July 23, 2009 3:04 AM
  Subject: [Winpcap-users] Size of packet captured!


  Dear all, 
  I'm using winpcap to capture 'SQL Batch Server Response'!
  When I received a packet from sqlserver, the size of the packet is too short, 
  so I can get all the data that the server response.

  Ex: I use 
  Select FirstName, MiddleName, LastName from Employees
  There are total 300 DataRows but I only receive 240 DataRows.

  Please help me about this.

  Thanks and Regard!



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090723/8131c3cd/attachment-0001.htm