Wireshark-bugs: [Wireshark-bugs] [Bug 6863] When Saving As "Displayed" with a filter, packets ar
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 24 Feb 2012 11:40:40 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6863

--- Comment #11 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2012-02-24 11:40:39 PST ---
The unfiltered capture file has 80925 frames.
The filtered capture file has 10752 frames.

If I run your filter on the capture file, I end up with 64072 frames.  If I
then "Save-As"("Displayed") I get a new capture file that contains 64072 frames
(which is correct).

I tried this in both trunk/ and trunk-1.6 (which is 1.6.5 plus some changes
which have already been back-ported).  But I'm on 64-bit Linux.

(In reply to comment #10)
> Another piece of information --- IF I do a call trace that is 5-6 min long,
> this does not happen.  If I do a call that is 10 min long, it does happen.

Does Wireshark crash when you're doing one of these Saves that end up
truncated?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.