<div>Greetings -</div>
<div> </div>
<div>I have encountered a problem using winpcap 3.1 from Microsoft's C# (Visual Sutdio 2005). </div>
<div> </div>
<div>I have seen the issue reported on the web, but after much searching I have not found an answer. Hopefully, someone here will know.</div>
<div> </div>
<div>Essentailly, the callback function is called properly for the first packet. When it is called for the second packet, some strange behaviour can be seen.</div>
<div>First, caplen in the header structure is set to the timeout value set when calling pcap_open_live. len is set to zero. Additionally, the data pointer comes back with the number of packets to capture (sent to pcap_dispatch).
</div>
<div><br>For example, if pcap_open_live is called with a timeout value of 5000, caplen comes back as 5000. If pcap_dispatch is called with the number of packets as 10, the pointer to the data comes back as equal to 10.</div>
<div> </div>
<div>Looking at the pcap structure, I'm wondering if something is messing with the data contained therein between the first and second calls to the callback function.</div>
<div> </div>
<div>Any thoughts? I would be much obliged.</div>
<div> </div>
<div>I should point out that using pcap_next_ex instead of dispatch or loop works just fine. Being that pcap_next_ex is just a wrapper for dispatch, it must be something that C# is doing.</div>
<div> </div>
<div>Thank you</div>
<div>Chris</div>