Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12586] Error reading an externally generated CAP

[bugzilla-daemon@xxxxxxxxxxxxx]

Comment # 2 on bug 12586 from Raffaele Rialdi

> So even though the manpage doesn't strictly forbid it, the semantics
> indicate that this is incorrect use of the format. It's simply not that
> flexible (it's rigid), hence the desire for pcapng.

I understand your point but:
- that tool is working in kernel mode, where a more complex format is not that
obvious to manage.
- previous versions of wireshark could manage that header without any problem.
- I don't see any side-effect in managing a record that is greater than the
piece of data to dissect

After all, there should have been some changes in the code which is now
preventing the file to be displayed.
So ... why not making it work again?

---

      You are receiving this mail because:

• You are watching all bug changes.