does not parse tcpdump file if "-i any" was used for capturing

[Vlad Lesin]

If "-i any" is used for capturing tcpdump parser works wrong. For example:
tcpdump -i any -s 0 -l -w - port 3306 -n > ./file.dump

PcapPacketsParser::ParsePkt() contains the following code:
ip= (struct sniff_ip*)(packet + SIZE_ETHERNET);

In the case of "-i any" the "ip" variable contains wrong data particularly ip packet length. That leads to wrong mysql command length calculation as a result the whole parsing is broken.

If interface name instead of "any" is used the parsing works well. For example:
tcpdump -i lo -s 0 -l -w - port 3306 -n > ./file.dump

[Jay Janssen (jay-janssen)]

Is this only on specific environments, or all known tcpdumps?

Can someone update the doc: http://www.percona.com/doc/percona-playback/plugins/tcpdump/index.html ASAP?

[Hrvoje Matijakovic (hrvojem)]

Docs have been updated