Wireshark-users: Re: [Wireshark-users] capture file cut short in the middle of a packet

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 08 Apr 2009 22:20:48 +0200

Hi,

You say you're saving a file *during* a live capture? That may be that the file isn't yet flushed out, before a copy is made, hence the end of the file isn't a proper record, hence causes this warning.

What if you first stop the capture, then save it?

Thanx,
Jaap

Condor Kim wrote:

unfortunately, my wireshark version is 0.99.4.. that's the only version i could download from the http.us.debian.org/debian repository for my linux eeepc 900a.

the popup message occurred only when i'm saving a session of live-capture.

why would the file be corrupted?

--- On *Sun, 4/5/09, Condor Kim /<toothache200873@xxxxxxxxx>/* wrote:


    From: Condor Kim <toothache200873@xxxxxxxxx>
    Subject: [Wireshark-users] capture file cut short in the middle of a
    packet
    To: wireshark-users@xxxxxxxxxxxxx
    Date: Sunday, April 5, 2009, 7:22 AM

    newbie got a question, sorry. please help.

    i use eee pc 900a with linux. lately whenever i tried to save the
    capture file after an internet session, i often got the message
    pop-up "the capture file appears to have been cut short in the
    middle of a packet." what does this mean?