https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2868
Summary: EditCap and TShark cannot convert iptrace format to
libpcap; Wireshark can
Product: Wireshark
Version: 1.0.3
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Normal
Priority: Medium
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: okrasz_news@xxxxx
Created an attachment (id=2235)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2235)
Example of an iptrace which can be converted by Wireshark but not EditCap or
TShark
Build Information:
TShark 1.0.3 (SVN Rev 26134)
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.6, with WinPcap (version unknown), with libz 1.2.3,
without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8, with ADNS, with
Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT Kerberos.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5.
Built using Microsoft Visual C++ 6.0 build 8804
--
EditCap as well as TShark is not able to convert IPTrace to a libpcap format.
Suprisingly Wireshark is able to do it (when you use "File -> Save as"). Please
try converting attached trace with following commands:
c:\>"c:\Program Files\Wireshark\editcap.exe" -F nseclibpcap aix61-ping.iptrace
ping.pcap
editcap: Can't open or create ping.pcap: Files from that network type can't be
saved in that format
c:\>"c:\Program Files\Wireshark\tshark.exe" -F libpcap -r aix61-ping.iptrace -w
test.pcap
tshark: The capture file being read can't be written in that format.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
