Wireshark-bugs: [Wireshark-bugs] [Bug 3606] New: Saving pcap capture file with ERF encapsulation
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 26 Jun 2009 07:44:28 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3606

           Summary: Saving pcap capture file with ERF encapsulation creates
                    an invalid pcap file
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: wmeier@xxxxxxxxxxx


Build Information:

--
Wireshark: 
a. Open a file with ERF encapsulation;
b. "Save As" selected packets (not the whole file since that will just copy the
file);

The output file format will be invalid. ("file has ... packet, bigger than
maximum of 65535").

Using editcap with an input ERF encapsulated file will also produce a bad
output file.

(I'm assuming that this happens on all OS's although I've only tried Windows).

(This is the cause of Bug #3569).

I'll have a look-see at the code....


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.