Wireshark-users: Re: [Wireshark-users] capture file cut short in the middle of a packet
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Fri, 10 Apr 2009 06:40:50 +0200
Hi,

Wireshark captures into a file in /tmp, after which you save save that elsewhere. Do you get disk full situations? That would result in both Wireshark stop capturing and having these capture file cut short issues.

Thanx,
Jaap

Condor Kim wrote:
no, the notice "capture file cut short in the middle of a packet" occurred when i clicked "stop capture" and then saved the file. i also notice that my wireshark often stopped by itself. i wonder if it's because my eeepc, with its 1 gb harddrive space (although i saved my wireshark files on sd cards) and limited capacity, simply couldn't handle wireshark. i also want to know if there are newer versions of wireshark to download my the debian repository... this 0.99 is no good.

--- On *Wed, 4/8/09, Condor Kim /<toothache200873@xxxxxxxxx>/* wrote:


    From: Condor Kim <toothache200873@xxxxxxxxx>
    Subject: Re: [Wireshark-users] capture file cut short in the middle
    of a packet
    To: "Community support list for Wireshark"
    <wireshark-users@xxxxxxxxxxxxx>
    Date: Wednesday, April 8, 2009, 7:44 PM

    unfortunately, my wireshark version is 0.99.4.. that's the only
    version i could download from the http.us.debian.org/debian
    repository for my linux eeepc 900a.

    the popup message occurred only when i'm saving a session of
    live-capture.

    why would the file be corrupted?

    --- On *Sun, 4/5/09, Condor Kim /<toothache200873@xxxxxxxxx>/* wrote:


        From: Condor Kim <toothache200873@xxxxxxxxx>
        Subject: [Wireshark-users] capture file cut short in the middle
        of a packet
        To: wireshark-users@xxxxxxxxxxxxx
        Date: Sunday, April 5, 2009, 7:22 AM

        newbie got a question, sorry. please help.

        i use eee pc 900a with linux. lately whenever i tried to save
        the capture file after an internet session, i often got the
        message pop-up "the capture file appears to have been cut short
        in the middle of a packet." what does this mean?