Align mock snaplen handling for pktHdr with reality
Closed this issue · 0 comments
fako1024 commented
If actual packets are truncated / smaller than the defined capture snaplen, the snaplen value in the TPacket header is set to the length of the packet, not the snaplen (as it currently the case for the mock source). This usually isn't a problem (because it will just allocate more memory than actually required) but may miss issues that would occur on an "real" capture.