Wireshark-bugs: [Wireshark-bugs] [Bug 3961] Can't convert from .pcapng to .pcap with versions 1.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3961
--- Comment #12 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2010-11-29 09:35:57 PST ---
(In reply to comment #11)
> (In reply to comment #10)
> > Erm, disregard my previous comment - it looks like there's no "combined"
> > capture file there.
> >
> > I'm sure that there are a few examples on the wiki, though.
>
> Indeed. With SVN 35062 I tried to load this one,
> http://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=view&target=BT_USB_LinCooked_Eth_80211_RT.ntar.gz.
>
> Unfortunately, it failed with the error message reading, "The capture file
> appears to be damaged or corrupt. (pcap:lipcap [sic] bluetooth file has a
> 3-byte packet, too small to have even a pseudo-header)"
>
> So it looks like there's another bug to fix first.
Actually, that file looks like it really only had 3 bytes of data included for
the first bluetooth encapsulated packet, so I guess the error was correct.
Whether Wireshark should skip this packet and continue trying to process the
remaining packets is another matter, but for now, I'm still left with no valid
pcapng file with multiple encapsulations with which to work with, as I haven't
been able to find any others on the wiki.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
