Ethereal-users: [ethereal-users] Problem reading a capture produced by MS Netmon 5.00.646
Hello,
as the subject says, I have problems reading a capture produced by that program
with Ethereal 0.8.4.
Upon the opening of the file, ethereal complains about a problem with it ("The
capture file appears to be damaged or corrupt") and on stdout I have the
following: "Message: netmon: File has 1112359981-byte packet, bigger than
maximum of 65535".. the file is correctly identified as "Microsoft Network
Monitor 2.x", and the native program opens the file without any problem, so I
think there could be a problem in the decoding of the file made by Ethereal.
In Ethereal's main window, the packets correctly appear until frame 380, then
there are two frames with a negative value into the "Time" field and all the
other fields blank, and then a last one with negative Time and absurd values
into the other fields.
May I be of any help by submitting the capture (compressed, for sure) to
someone of the developers ?
I'd like to see this problem fixed, because Ethereal gives much more
information, and in a much easier and user friendly way, than the MS program !
Thank you for your attention.
--
Bye,
Fabrizio Ammollo.
