segv in argus with latest pf_fring enabled lipcap

[Peter Van Epp]

On Mon, Jul 07, 2008 at 03:03:14PM -0500, Will Metcalf wrote:
> yep same thing reading from the tcpdump captured pcap... segv's in the
> same function...
> 
> Regards,
> 
> Will
>
	Another interesting test would be to take that tcpdump pcap file to
an identical machine without pf-ring in the kernel and see if tcpdump there
can read it i.e. is pf-ring emitting malformated pcap files that its modified
pcap can read but no one else's can.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada