gojue / ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
https://ecapture.cc
Apache License 2.0
13.42k stars 1.42k forks source link

The capture file appears to have been cut short in the middle of a packet. #385

Closed newcworld closed 1 year ago

newcworld commented 1 year ago

Describe the bug use ecapture save pcapng format file After open the dump file, it appears

The capture file appears to have been cut short in the middle of a packet.
截屏2023-08-11 15 19 28

To Reproduce

./ecapture tls -i rmnet_data2 -w /sdcard/BaiduNetdisk/test_2.pcapng  
cfc4n commented 1 year ago

Please make sure that rmnet_data2 is the network interface you are using for data usage.

cfc4n commented 1 year ago

ping?

cfc4n commented 1 year ago

No response. closed.