Ethereal-dev: Re: [ethereal-dev] Re: [ethereal-users] Ethereal crash reading tcpdump '-r' file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 13 Sep 2000 14:31:42 -0400
On Wed, Sep 13, 2000 at 10:54:29AM -0700, Marc Solsona Palomar wrote:
> Sure,
>

The capture file appears to be corrupt. But there's enough
wierdness with libpcap on RedHat (are you using Linux? are you
using RedHat) that maybe there's a file format that we don't
expect.

Anyway, the first packet has these characteristics, which looks
good:

cap_len=294, pkt_len=294

But the second packet has these:

cap_len=162, pkt_len=-1077946110

You say you have libpcap version 0.4; where did you get your
libpcap and tcpdump? Are the the distribution versions, or did
you compile from source?

--gilbert