Ethereal-users: Re: [Ethereal-users] perl Net::Pcap libpcap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 14 Oct 2003 10:34:56 -0700
(This is really a libpcap issue, so it should really go to
tcpdump-workers@xxxxxxxxxxx.)

On Tue, Oct 14, 2003 at 02:35:29PM +0100, Andy Ford wrote:
> I am having a small issue with the perl module Net::Pcap and was
> wondering whether anyone has programmed with the module before.
> The issue I have is related to solaris, where I am sniffing an interface
> for icmp echo replies that have a destination mac address of the solaris
> box i.e. replies from an icmp request I have sent out.
> 
> When I run snoop alongside my sniffer, snoop picks up the replies
> immediately on the interface, but my sniffer will stall resulting in an
> incurred time delay of the RTT (up to 35s in some cases)

What timeout are you setting in the pcap_open_live() call (or whatever
the Net::Pcap call has as a wrapper for "pcap_open_live()")?