Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 8997] New: "Linux Cooked Capture" header has incorrect padding

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	8997
Summary	"Linux Cooked Capture" header has incorrect padding
Classification	Unclassified
Product	Wireshark
Version	1.10.1
Hardware	x86-64
OS	Ubuntu
Status	UNCONFIRMED
Severity	Minor
Priority	Low
Component	Capture file support (libwiretap)
Assignee	bugzilla-admin@wireshark.org
Reporter	deschepper@gmail.com

Created attachment 11308 [details]
Packet with Linux cooked capture header.

Build Information:

--
Capture of packets in 'any device' mode was done on system B.

Reading the attached capture file on system A gives different result from
system B:

System A:
- Windows 7
- x86-64 
- Wireshark version 1.10.1

System B:
- Ubuntu 12.04.01
- x86-64
- Wireshark version 1.6.7

Reading the exact same capture file, system A says that the padding in the
Linux Cooked Capture is 2 bytes shorter than system B says it is. As a
consequence, 1.10.1 thinks that there is a 2-byte VSS monitoring trailer at the
end. I attach a packet as an example.

I actually don't know whether the problem is in 1.10.1 or in 1.6.7.

---

      You are receiving this mail because:

• You are watching all bug changes.