pcap_parser::LegacyPcapReader handles short reads poorly.

Question

pcap_parser::LegacyPcapReader handles short reads poorly.

vi opened this issue 3 years ago · 4 comments

Feeding pcap file to the parser slowly and incrementally may lead to Error: Incomplete read or endless loop with PcapError::Incomplete without syscalls (despite of reader.refill().unwrap()).

Answer 1 · 2022-02-28T09:11:01.000Z

Swapping the parsing lib to pcap_file::PcapReader makes issues go away.

Answer 2 · 2022-03-08T08:42:02.000Z

Hi,
I'm not sure, but this may be related to 7335348
A new minor release is due soon (including the above commit).

Answer 3 · 2022-03-08T09:07:47.000Z

0.13.1 is release, can you confirm if the problem is fixed? If not, can you provide more details and/or some code?
Thanks

Answer 4 · 2022-05-13T08:08:41.000Z

Closing due to lack of new information.
Bug should be fixed since 0.13.1, please reopen issue if needed.