Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 22:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Compare pcap_next_ex() result to PCAP_ERROR/PCAP_ERROR_BREAK

Browse source
This commit is contained in:
Jon Siwek 2020-06-11 15:01:06 -07:00
parent 2000e2a424
commit 65ae4d732a
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/iosource/pcap/Source.cc
View file

@ -202,12 +202,12 @@ bool PcapSource::ExtractNextPacket(Packet* pkt)
int res = pcap_next_ex(pd, &header, &data); int res = pcap_next_ex(pd, &header, &data);
switch ( res ) { switch ( res ) {
case -2: case PCAP_ERROR_BREAK: // -2
// Exhausted pcap file, no more packets to read. // Exhausted pcap file, no more packets to read.
assert(! props.is_live); assert(! props.is_live);
Close(); Close();
return false; return false;
case -1: case PCAP_ERROR: // -1
// Error occurred while reading the packet. // Error occurred while reading the packet.
if ( props.is_live ) if ( props.is_live )
reporter->Error("failed to read a packet from %s: %s", reporter->Error("failed to read a packet from %s: %s",