Ethereal-dev: [Ethereal-dev] FYI: Captures from (very old) WinPcap sometimes seems to have str

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Tue, 13 Sep 2005 13:25:57 +0200
Hi List!

Just for your information ...

Found some private capture files with strange "Short Frame" messages.

The captures were done quite a while ago (october 2002), using Ethereal and WinPcap (don't know the version I used at that time).

The snapshot length used was 65535, traffic on the network was very limited so certainly no "network overload" problem.

Some (very few) of the packets have invalid lengths reported, e.g.:

Frame 15 (180 bytes on wire, 179 bytes captured)

I've seen other frames the same way, having exactly 1 byte less captured than on the wire.

This problem seems to be fixed with recent WinPcap, can't find any of such problems with capture files done in 2003 or later.

Regards, ULFL
______________________________________________________________________
XXL-Speicher, PC-Virenschutz, Spartarife & mehr: Nur im WEB.DE Club!		
Jetzt gratis testen! http://freemail.web.de/home/landingpad/?mc=021130