Re: Regarding PCAP versions

[Guy Harris <guy () alum mit edu>]

On Jul 13, 2009, at 11:59 PM, Chandru S wrote:

> 1)When I use pcap funcions for a single time it is working fine.But  
> when we run a batch of traffic testcases for many hours It is  
> dumping(segmentation fault) .Also core files gives us a indication  
> that it happens mostly in PCAP functions such as pcap_dump or  
> pcap_loop or pcap_compile.So can any one please give a solution for  
> this issue.

Either

	1) there's a bug in libpcap, in which case you should try a newer  
version of libpcap (either with a newer version of your OS, if it  
comes with libpcap, or with a newer version downloaded from http://www.tcpdump.org/) 
 and see if it still has the bug and, if so, report it to tcpdump-workers () lists tcpdump org 
 or report it at the libpcap SourceForge site:

        https://sourceforge.net/projects/libpcap/

or

	2) there's a bug in your program, and it's doing something such as  
passing null pointers to routines expecting those pointers to point to  
something.

We'd need to see, at minimum, a stack trace from the crash to see  
which of those it is.

> 2)Next Is there any document which shows what is difference in each  
> releases.So that i can identify if the problem is with old version  
> or not.

See the CHANGES file in the libpcap source code.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.