Ethereal-dev: Re: [Ethereal-dev] distcc dissector - need help with tcp desegmentation

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 6 Feb 2003 11:18:39 -0800
On Thu, Feb 06, 2003 at 08:34:22PM +1100, Brad Hards wrote:
> 1. Irrespective of this patch, it looks like ethereal can't capture every
> packet. This is particularly noticable when using the loopback interface for
> testing. I'm not sure why it occurs. I know that distcc does make heavy use of
> sendfile(), and perhaps pcap is running out of buffering space. I haven't
> tried tcpdump yet, nor have I done a lot of tests with a real network.

Try it with tcpdump; if that fails as well, it's probably either an
issue with libpcap or with the underlying packet capture mechanism in
the OS.