Ethereal-users: Re: [Ethereal-users] Partial packets dump & crash

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 14 Oct 2004 16:55:23 -0700
Bart Braem wrote:

I am doing network simulation and work with dumps containing partial
packet dumps, in this case the ethernet header is absent I just see
IP. Is is possible to view these dumps in ethereal?


What program is writing the packet dumps?
If they're in libpcap format, with a link-layer type of DLT_RAW, Ethereal can read them. 


The crash: currently when opening such a file  and specifying another
decoding ethereal segfaults, is this a known error?


What do you mean by "specifying another decoding"?
This probably isn't a known bug; could you tell us exactly what steps caused the crash?