Messages in this thread | | | From | Eric.Schenk@dna ... | Subject | Re: tcpdump & bad tcp checksum | Date | Thu, 24 Jul 1997 11:26:21 +0200 |
| |
Jes Degn Soerensen <jds@kom.auc.dk> writes: >Eric> tcpdump only grabs the first few bytes of a packet (by default). > >Ehhhmmm, tcpdump for Linux tend to grab the full packet rather than >just the header, just checked libpcap-0.4a1 and its still like >that. Yup this is bad, especially for `large' MTU networks such as >FDDI, and I guess we should do something about this at some point.
That's rather stupid. There is no need to read the full packet in, even off a SOCK_PACKET socket. This will really bite us once we get HIPPI support in (64k MTU anyone?). Can someone with a few spare hours see about getting this fixed and rolled into the mainline sources? I'd add it to my list, but I'm snowed under already, and I'm getting ready to move back to Canada at the moment, so my spare time is severly limited right now.
-- Eric Schenk www: http://www.dna.lth.se/~erics Dept. of Comp. Sci., Lund University email: Eric.Schenk@dna.lth.se Box 118, S-221 00 LUND, Sweden fax: +46-46 13 10 21 ph: +46-46 222 96 38
| |