-
I've checked in a change to save the first, rather than the last, IE of a given type (except for zero-length rates IEs, which are ignored - some devices seem to put a zero-length rates IE into frames, followed by the right rates IE). That should address this problem (the frames are still bad, so they're reported as such, with [|802.11]).
2009-11-04 22:59:50 UTC in The tcpdump project
-
At the end of frame 8's data, there are 5 bytes: 00 0c 12 18 60. That frame has a radiotap header, but the flags field does *NOT* have the "FCS present at end" bit set, so neither tcpdump nor Wireshark believe the frame has the FCS in the last 4 bytes. Furthermore, the frame is claimed to have been 474 bytes long on the network, with only the first 94 bytes of the frame captured.
The 00...
2009-11-04 00:37:32 UTC in The tcpdump project
-
Nope, *NOT* the same root cause.
The root cause of 2543416 was that the printer wasn't stopping before the FCS, and was parsing the FCS as if it were part of the payload.
The root cause of this is that the packets are cut short by a snapshot length, and the printer isn't stopping at the snapshot length.
2009-11-04 00:28:33 UTC in The tcpdump project
-
Make a patch for that support, and attach it to this bug.
2009-11-03 22:53:03 UTC in The libpcap project
-
Checked into the main Git branch, with some changes (I only fall back on the old directory if the open failed with ENOENT, so other errors get reflected with the new path; your patch was missing the open of the old path in the stats case).
2009-11-03 22:52:04 UTC in The libpcap project
-
Those C++isms have been removed from the current top-of-tree Git version, so the bug is fixed there.
2009-11-03 22:26:41 UTC in The libpcap project
-
The top-of-tree Git version does
if (uhdr->urb_len == 0)
goto got;
in the code in question, so the bug appears to be fixed there.
2009-11-03 22:24:35 UTC in The libpcap project
-
I've checked in a change based on yours.
2009-11-03 22:18:54 UTC in The libpcap project
-
I've checked in a variant of those changes (this isn't a per-distribution issue, BTW).
2009-10-13 00:22:59 UTC in The libpcap project
-
Checked into the main branch and pushed.
2009-08-18 22:03:08 UTC in The tcpdump project
