Wireshark-bugs: [Wireshark-bugs] [Bug 12586] Error reading an externally generated CAP
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 16 Jul 2016 22:53:43 +0000

changed bug 12586


What Removed Added
Status RESOLVED CONFIRMED
Resolution NOTOURBUG ---
Ever confirmed   1

Comment # 4 on bug 12586 from 
There *aren't* any packets with a header length of 8323072, as demonstrated by
opening the file with a forced "file type" of "MIME file type", to show the
actual file structure.

The problem is that the heuristics to try to figure out which type of pcap file
it is conclude that it's not a standard pcap file, so we end up reading the
file under the assumption that the per-packet header is bigger than it really
is, and get "out of sync" and treat some information as a captured length when
it's something else.

You are receiving this mail because:
  • You are watching all bug changes.