Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 53692

Summary: tcpdump packets printed/captured numbers negative
Product: [Retired] Red Hat Linux Reporter: Pekka Savola <pekkas>
Component: tcpdumpAssignee: Harald Hoyer <harald>
Status: CLOSED RAWHIDE QA Contact:
Severity: medium Docs Contact:
Priority: high    
Version: 7.3CC: olivier.crete
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2002-01-07 10:36:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pekka Savola 2001-09-15 12:05:17 UTC 
kernel-2.4.7-10
tcpdump-3.6.2-9

Packets printed/captured counts seem to be pretty screwed up.

]# tcpdump -n 
tcpdump: listening on eth0
15:07:51.312993 802.1d config 8000.00:00:a2:ed:60:16.8003 root
8000.00:00:a2:ec:65:df pathcost 10 age 0 max 20 hello 2 fdelay 15 
15:07:53.312805 802.1d config 8000.00:00:a2:ed:60:16.8003 root
8000.00:00:a2:ec:65:df pathcost 10 age 0 max 20 hello 2 fdelay 15 
^C
-2147349966 packets received by filter
-1073744432 packets dropped by kernel
#

Any traffic that's printed seems to trigger the problem.  Before that,
counts are 0/0.

1073744432*2 == 2147488864
-2^31 == -2147483648

looks like an arithmetic overflow.
Comment 1 Pekka Savola 2001-09-15 12:17:08 UTC 
New patch51 from #52654 seems to have broken this; leaving it out
fixes this problem. :-(

The libpcap-filter patch seems huge.  Is all this really necessary?  There have
been other
changes in CVS, and if you missed some implications of the new code, the results
might not be pretty (for any app using libpcap)..
Comment 2 Harald Hoyer 2001-12-18 15:31:47 UTC 
*** Bug 57004 has been marked as a duplicate of this bug. ***
Comment 3 Olivier Crête 2001-12-18 20:36:41 UTC 
The bug is present in Rh 7.2 too, not only in rawhide as this bug seems to imply.
Comment 4 Harald Hoyer 2002-01-07 10:36:35 UTC 
*** Bug 58000 has been marked as a duplicate of this bug. ***
Comment 5 Harald Hoyer 2002-01-17 15:26:03 UTC 
should be fixed in 3.6.2-10 or newer