Wireshark-bugs: [Wireshark-bugs] [Bug 4606] New: problem opening dumpfiles and capturing
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 22 Mar 2010 06:55:32 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4606

           Summary: problem opening dumpfiles and capturing
           Product: Wireshark
           Version: 1.2.6
          Platform: x86
        OS/Version: Gentoo
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: johannes.jeske@xxxxxxxxx


Build Information:
Version 1.2.6

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.18.7, with GLib 2.22.4, with libpcap 1.0.1_pre20090812,
with libz 1.2.4, with POSIX capabilities (Linux), with libpcre 8.0, without
SMI,
without c-ares, without ADNS, without Lua, without GnuTLS, without Gcrypt,
without Kerberos, without GeoIP, without PortAudio, without AirPcap.

Running on Linux 2.6.32-tuxonice-r5, with libpcap version 1.0.1_pre20090812.

Built using gcc 4.4.3.

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Hi there,
I was trying to get a capture started, it seems that only one "sample" was
captured. What I mean by this is, the first packet(s) get captured, all
following aren't recognized. So I tried dumping with tcpdump and opening the
resulting file with wireshark, but then it gave me this error:
The capture file appears to be damaged or corrupt.
(pcap: File has 1435526081-byte packet, bigger than maximum of 65535)

The file is not corrupted, tcpdump can read it. I have no idea why wireshark
stopped working lately.

tcpdump: 3.9.8-r1 or 4.0.1_pre20090709, doesn't make a difference
libcap: 2.17 or 2.19, no difference either
libpcap: 1.0.1_pre20090812

Best Regards
Johannes Jeske

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.