On Thursday, August 18, 2011 00:54:45 Fabrizio Giordano wrote:
> I have Scientific Linux 6.0 on my machine and apparently the version of
> libpcap that's distributed with it (libpcap-1.0.0-
> 6.20091201git117cb5.el6.x86_64) has a bug when opening a device with a
> snaplen smaller than 13.
> Besides, even if the snaplen is greater or equal to 13, the captured packet
> size won't match the selected snaplen.
> 
> The following message will be displayed when opening a device with a
> snaplen < 13:
> "Error reading the packets: corrupted frame on kernel ring mac offset 70 +
> caplen 0 > frame len 64"
> 
> Apparently these two bugs have already been fixed in the latest version of
> libpcap.
> I attached a test application.

Please check the rh bugzilla and if the bug is not known, please create it.

	Cheers,

		Andreas