Wireshark · Ethereal-dev: Re: [Ethereal-dev] While writing to a pipe, getting some errorneous extra bytes between packets ?!?

[Guy Harris <gharris@xxxxxxxxx>]

Ulf Lamping wrote:

> I'm calling the following (under cygwin):
>
> ./tethereal -i 3 -c 10 -a duration:30 -F libpcap -w - > ./testout.pcap 
> 2>./testout.txt

But it works OK if you do

	./tethereal -i 3 -c 10 -a duration:30 -F libpcap -w testout.pcap

?

> But there are three additional bytes: "00 00 02" between each captured 
> packet (first appearance at offset 0x52), which obviously will produce 
> an error when reading the file later.

Actually, it's "at the end of each captured packet" - there's one at the 
end of the file, too.