Red Hat Bugzilla – Bug 58000
error in libpcap code (RH specific)
Last modified: 2008-05-01 11:38:01 EDT
From Bugzilla Helper:
User-Agent: Mozilla/4.76 [en] (X11; U; SunOS 5.8 sun4u)
Description of problem:
libpcap code in RH 7.2 seems to have an error. In tcpdump you can see the
command: ./tcpdump -n -i eth0
-2147415483 packets received by filter
-1073744432 packets dropped by kernel
This is in libpcap, not tcpdump AFAIK because other apps, such as argus
(http://www.qosient.com) linked against libpcap have no problem. Also, I
RH libpcap and insatlled the version (made from source) from tcpdump.org
everything worked fine on argus.
I reproduced the problem rebuilding tpcdump.src.rpm from scratch, so it's
a binary issue...it's somewhere (probably) in the RH patches.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. See above.
Actual Results: negative byte counts in output of tcpdump. libpcap
Expected Results: negative byte counts don't make sense. should be
Note this isn't just an uninit int error...other applications linked
against RH libpcap
will not work from mysterious errors. Once libpcap was replaced with the
from tcpdump.org, those errors go away.
*** This bug has been marked as a duplicate of 53692 ***