Wireshark-bugs: [Wireshark-bugs] [Bug 3961] Can't convert from .pcapng to .pcap with versions 1.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3961
Chris Maynard <christopher.maynard@xxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #5512| |review_for_checkin?
Flag| |
--- Comment #2 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2010-11-23 21:40:10 PST ---
Created an attachment (id=5512)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5512)
Patch to allow conversion of pcapng file to pcap file.
This patch allows pcapng files to be saved as pcap without having to specify
"-T <encap>". The main change was in pcapng_open() where, after having saved
the file position, reading blocks is continued until the mandatory Interface
Description Block (IDB) is read, at which point the encapsulation is saved.
Once that's done, the file position is restored to where it was before.
In fixing this bug, I also made a change to allow the pcapng snap length to be
saved as well. Now capinfos as well as Wireshark's summary will display the
snap length for pcapng files, whereas previously they weren't able to.
Not committing this patch yet, mostly to allow time for some feedback and to
make sure I didn't miss anything, particularly in the new pcapng_seek()
function. I'll commit it in a few days if I don't hear anything negative back
about it.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
