ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Bug in compressed sniffer file decode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 3 Sep 2003 16:23:45 -0700

On Tuesday, September 2, 2003, at 4:03 PM, Greg Morris wrote:

When attempting to decode a NAI Sniffer file CAZ. The initial dissection works. But if you filter down the trace and then reset the filter then the file is no longer dissected. The original trace included around 18000 packets. I stripped it down to as low as 250 packets and was able to duplicate the problem. If I get the file below 250 packets I can no longer get the problem to occur.

I've checked in a change to check all calls to "wtap_seek_read()" in "file.c" to see whether they failed, and to pop up an alert box if the call failed; if you read in Snif6.caz, go to the last frame, and then go to the first frame, it now pops up an alert box with the error being "Uncompression error: data error".

That's an error coming back from zlib.