Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1711] Some Toshiba format files with LAPD cannot be open

Date: Fri, 9 Nov 2007 15:47:41 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1711





------- Comment #9 from florent.drouin@xxxxxxxxxx  2007-11-09 15:47 GMT -------
As explain by Guy, the problem was is the heuristic for the ERF format
identification. Only the 20 first records are analyzed to determinate if the
file match the ERF format. I tried to improve the heuristic, for example, by
checking the timestamps are ordered, or by checking the 'record length' in the
ERF header is greater than the 'wire length'.
But, when I do this, some real ERF files are not recognized..
If there again a problem of format detection, I will see how to implement a
strong heuristic with an option to bypass some tests.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.