ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] editcap -F nokialibpcap option:

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Mon, 14 Jun 2004 15:42:34 -0700 (PDT)
Durai said:
> Can I increase the packet size to avoid this error?

No, because

    1) you can't increase the packet size

and

    2) even if you could, it wouldn't fix the underlying problem, which is
that the heuristics the Wiretap code used by Ethereal and Tethereal
currently uses to try to guess the capture file format don't always
detect Nokia-format captures.

We could perhaps strengthen the heuristics by having Wiretap try to read
more than two packets from the file when trying to figure out its file
format (it won't ever try to read the entire file, as that would make
determining the file format take a significant amount of time for a large
capture).

Why are you trying to write files out in Nokia format?