Re: [Tomahawk-users] Q: Invalid pcap

[<bri...@3c...>]

Tomahawk's complaining because the packet trace doesn't have the full 
packet, only the first 144 bytes of a 201 byte packet.

By default, tcpdump truncates the packet capture (apparently to 144 bytes, 
in your case);  use the -s0 flag to tcpdump and it should work.

# tcpdump -i eth0 -s0 -w testdump.pcap

        Brian




"도꼬비" <il...@pa...> 
Sent by: tom...@li...
03/20/2007 08:57 PM
Please respond to
도꼬비 <il...@pa...>


To
<tom...@li...>
cc

Subject
[Tomahawk-users] Q: Invalid pcap






I tried to run with the tomahawk1.1 package.
 
# tcpdump -i eth0 -w testdump.pcap
..

# tomahawk -l 1 -f testdump.pcap
Invalid pcap: Complete packet not stored in file (time: 1007329426.360919, 
201 bytes on wire, 144 bytes in file)
#
 
But a general tcpdump data occurrs above error.
What's problem?
I need to your help.




-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share 
your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Tomahawk-users mailing list
Tom...@li...
https://lists.sourceforge.net/lists/listinfo/tomahawk-users