[Winpcap-users] Partial packet after pcap_next_ex()

[Gisle Vanem]

"Guy Harris" <guy at alum.mit.edu> wrote:

> If the pointer filled in by a pcap_next_ex() call points to text,  
> rather than to a chunk of data that begins with a link-layer header,  
> that's a bug in libpcap/WinPcap.

I find that hard to believe: There is no such bug in WinPcap (not in
NPF.SYS ver 4.0.0.1040 at least). I've captured terabytes of data and never
seen what the OP states. Let us see some code before jumping to
conclusions.

--gv