does not parse tcpdump file if "-i any" was used for capturing
Bug #1206819 reported by
Vlad Lesin
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MOVED - Percona Playback |
New
|
Undecided
|
Unassigned |
Bug Description
If "-i any" is used for capturing tcpdump parser works wrong. For example:
tcpdump -i any -s 0 -l -w - port 3306 -n > ./file.dump
PcapPacketsPars
ip= (struct sniff_ip*)(packet + SIZE_ETHERNET);
In the case of "-i any" the "ip" variable contains wrong data particularly ip packet length. That leads to wrong mysql command length calculation as a result the whole parsing is broken.
If interface name instead of "any" is used the parsing works well. For example:
tcpdump -i lo -s 0 -l -w - port 3306 -n > ./file.dump
To post a comment you must log in.
Is this only on specific environments, or all known tcpdumps?
Can someone update the doc: http:// www.percona. com/doc/ percona- playback/ plugins/ tcpdump/ index.html ASAP?