ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 6260] Saving ERF files.

Date: Tue, 30 Aug 2011 19:18:21 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6260

--- Comment #7 from andrew.kampjes@xxxxxxxxxx 2011-08-30 19:18:20 PDT ---
(In reply to comment #6)
> What happens if an Ethernet packet being saved already *has* a CRC?

If it's saving ERF->ERF it assumes that there's already a checksum (Endace
software expects one).
If it's saving Other-ERF it assumes that there isn't one because most other
network cards won't capture the checksum and you want ERF files to be
compatible with other Endace software. So yes, if for some reason there is a
pcap file Ethernet with CRC checksums you will end up with two checksums,
basically corrupting your file. I'd love to fix this but there doesn't seem to
be a facility for options when saving files.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.