[Click] ToDump with SNAPLEN 0 problems
Eddie Kohler
kohler at cs.ucla.edu
Wed Oct 27 11:35:39 EDT 2004
Marcel Poisot wrote:
> I want to capture entire packets no matter how large they are, so I set
> the SNAPLEN field to 0. I tried the different syntaxes just to make sure:
> ToDump( HTTP.dump, 0, ENCAP IP )
> ToDump( HTTP.dump, SNAPLEN 0, ENCAP IP )
>
> However, when I try to view the dump with tcpdump it reports:
> tcpdump: snaplen of 0 rejects all packets
>
> Ethereal agrees that there isn't much in the dump. "48 bytes on wire, 0
> captured".
>
> Moreover, when the first packet is received, the router prints the line:
> ToDump(HTTP.dump): Success
>
>
> If I supply a number (like 3000) for SNAPLEN, or just use the default
> value, tcpdump reads the file just fine and there is no "Success" print
> statement.
>
> Suggestions?
Whoops! This was a bug on our part. CVS now treats SNAPLEN 0 as equivalent to
SNAPLEN 0xFFFFFFFF, which works. In the meantime, you can just say SNAPLEN
0xFFFFFFFF. Thanks!
Eddie
> _______________________________________________
> click mailing list
> click at amsterdam.lcs.mit.edu
> https://amsterdam.lcs.mit.edu/mailman/listinfo/click
More information about the click
mailing list