Wireshark-bugs: [Wireshark-bugs] [Bug 7350] New: pcap-ng - most files created by editcap -c have
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 9 Jun 2012 18:08:00 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7350

           Summary: pcap-ng - most files created by editcap -c have no IDB
           Product: Wireshark
           Version: 1.8.0
          Platform: x86-64
        OS/Version: Windows 7
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Extras
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: jasper.bongertz@xxxxxxxxxxxx


Build Information:
Version 1.8.0rc1 (SVN Rev 43134 from /trunk-1.8)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with PortAudio
V19-devel (built Jun  6 2012), with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 10.0 build 40219
--
When using editcap to split a trace into multiple smaller files using the "-c"
parameter only the first file will have an Interface Description Block. All
other files will not have one, even though it is mandatory for pcap-ng files.
They also do not seem to have an ISB at the end of the file.

I think each file must have all interfaces of the original file in an IDB block
because otherwise the interface index of the packet blocks cannot be matched to
an interface entry.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.