I'm writing a program which reads live captures and processes them. I'm using pcap_next_ex for capturing and it returns -1 and -2 unexpectdly. Will it be nice to use pcap_loop rather than pcap_next_ex? Which one is more efficient? Is the problem associated with read time out? asked 18 May '11, 23:30  Fitsum edited 19 May '11, 21:24  cmaynard ♦♦ |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
Well, this is really a [email protected] question, but:
On what operating system is this?
Are you calling pcap_breakloop() in your program?
When pcap_next_ex() returns -1, what does pcap_geterr() return?