Nobody/Anonymous - 2007-07-10

Logged In: NO

Is there any activity on tcpslice? I found a "tcpslice-1.2a2" version, anything more current?

I've got a patch against 1.2a2 for the "problems finding end packet of file <filename>" problem,
that I've been using internally for a few years now if anyone is interested.

Paul Herman
herman@cleverbridge.com

------------------------------------------------------
--- tcpslice.c.orig Wed Oct 9 00:32:12 2002
+++ tcpslice.c Tue Jul 10 08:06:55 2007
@@ -635,6 +635,7 @@
/* there aren't any packets of interest in this file */
s->done = 1;
pcap_close(s->p);
+ s->p = NULL;
continue;
}

@@ -656,7 +657,13 @@
get_next_packet(s);
}

- dumper = pcap_dump_open(states->p, write_file_name);
+ for (i = 0; i < numfiles; ++i) {
+ s = &states[i];
+ if (s->p != NULL) break;
+ }
+ if (s->p == NULL)
+ return;
+ dumper = pcap_dump_open(s->p, write_file_name);
if (! dumper) {
error( "error creating output file %s: ",
write_file_name, pcap_geterr( states->p ) );