Wireshark · Ethereal-dev: Re: [Ethereal-dev] Bug in compressed sniffer file decode

["Greg Morris" <gmorris@xxxxxxxxxx>]

Problem only occurs with traces 250 packets or more. I created one with 249 packets and it doesn't fail. If I create the same with 250 packets then the error occurs. Attached is the 249 packet trace.

 

Greg

>>> Gilbert Ramirez <gram@xxxxxxxxxxxxxxx> 9/3/2003 12:21:26 PM >>>

On Tue, 2003-09-02 at 18:03, Greg Morris wrote:
> When attempting to decode a NAI Sniffer file CAZ. The initial dissection
> works. But if you filter down the trace and then reset the filter then
> the file is no longer dissected. The original trace included around
> 18000 packets. I stripped it down to as low as 250 packets and was able
> to duplicate the problem. If I get the file below 250 packets I can no
> longer get the problem to occur.

Can you produce a 249-packet file that doesn't have the problem and post
it to ethereal-dev, too?

--gilbert

Attachment: Snif1.caz
Description: Binary data