Wireshark-bugs: [Wireshark-bugs] [Bug 3895] Save-As Nokia tcpdump corrupts the file
Date: Wed, 21 Dec 2011 12:19:17 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3895

--- Comment #18 from Guy Harris <guy@xxxxxxxxxxxx> 2011-12-21 12:19:16 PST ---
Note that, not knowing what the contents of the 4 bytes in question are, we
can't arrange that we can write out any file other than Nokia tcpdump files as
Nokia tcpdump files and have Wireshark recognize them as such, unless we write
them out as 0xFFFFFFFF or something such as that.

Given that, I'm not sure we should support writing out any files other than
Nokia tcpdump files in Nokia tcpdump format.

I'm really not inclined to try to "fake" the 4 bytes as if they were packet
contents.  The right way to do it might be to both per-file-type and per-packet
pseudo-headers - there might be other file formats that could use the
per-file-type pseudo-header, e.g. HP-UX nettl - and stuff the 4 bytes into a
per-file-type pseudo-header.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.