Wireshark-bugs: [Wireshark-bugs] [Bug 6002] Cannot Live-capture VirtualBox network packets with
Date: Tue, 7 Jun 2011 13:10:24 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6002

Jakub Zawadzki <darkjames@xxxxxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darkjames@xxxxxxxxxxxxxxxx

--- Comment #6 from Jakub Zawadzki <darkjames@xxxxxxxxxxxxxxxx> 2011-06-07 13:10:23 PDT ---
$ cat myvm.cap | ~/svn/wireshark/dumpcap -i -

generates empty file.

First frame is funny:

$ ~/svn/wireshark/tshark -r myvm.cap  -V
Frame 1: 60 bytes on wire (480 bits), 0 bytes captured (0 bits)
    Arrival Time: Jan  1, 1970 01:00:00.000000000 CET
    Epoch Time: 0.000000000 seconds
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 60 bytes (480 bits)
    Capture Length: 0 bytes (0 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth]
    File Offset: 40 (0x28)
[Packet size limited during capture: Ethernet truncated]

It seems dumpcap can't handle such frame?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.