ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: [Ethereal-dev] editcap -F nokialibpcap option:

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Durai" <mail_714@xxxxxxxxxxx>
Date: Mon, 14 Jun 2004 10:13:25 +0530
Hello All,

               when I run editcap with -F nokialibpcap option, I get the
following error:

$ tethereal -S -c 5 -w data.pcap
Capturing on lan0
  0.000000 172.16.1.156 -> 172.16.1.26  TELNET Telnet Data ...
  0.002005 172.16.1.156 -> 172.16.1.26  TELNET Telnet Data ...
  0.002163 172.16.1.156 -> 172.16.1.26  TELNET Telnet Data ...
  0.002297 172.16.1.156 -> 172.16.1.26  TELNET Telnet Data ...
  0.002428  172.16.1.26 -> 172.16.1.156 TCP 1203 > telnet [ACK] Seq=0 Ack=9
Win=16355 Len=0

5 packets captured
$ editcap -F nokialibpcap data.pcap out.pcap
$ tethereal -r out.pcap
  1   0.000000 94:f1:08:00:45:00 -> 76:29:00:30:6e:48 LLC I, N(R)=0,
N(S)=32; DSAP c4 Group, SSAP d6 Command
  2 -1086694712.459232              ->              Ethernet [Malformed
Packet]
tethereal: "out.pcap" appears to be damaged or corrupt.
(pcap: File has 773377-byte packet, bigger than maximum of 65535)

Can I increase the packet size to avoid this error?

Regs,
Durai.


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.698 / Virus Database: 455 - Release Date: 6/2/2004