Wireshark · Ethereal-users: Re: [Ethereal-users] Strange behaviour ethereal 0.9.0 (self compiled) capture file corrupted !!]

[pigi@xxxxxxxx]

> On what platform are you running Ethereal
Sorry, I forgot.
Linux 2.4.12 ( starting distro slackware )
libpcap 0.62 (0.71)
Must say that if I download the binary package from slackware it works
correctly.
ethereal -v say:
ethereal 0.9.0, with GTK+ 1.2.10, with GLib 1.2.10, with libpcap 0.7,
with libz 1.0.8, without SNMP
ldd ethereal
        libsnmp.so.3.7 => /lib/libsnmp.so.3.7 (0x40021000)
        libgtk-1.2.so.0 => /opt/gnome/lib/libgtk-1.2.so.0 (0x40d79000)
        libgdk-1.2.so.0 => /opt/gnome/lib/libgdk-1.2.so.0 (0x40e9e000)
        libgmodule-1.2.so.0 => /opt/gnome/lib/libgmodule-1.2.so.0
(0x40ed0000)
        libglib-1.2.so.0 => /opt/gnome/lib/libglib-1.2.so.0 (0x40ed3000)
        libdl.so.2 => /lib/libdl.so.2 (0x40ef6000)
        libXext.so.6 => /usr/X11R6/lib/libXext.so.6 (0x40efb000)
        libX11.so.6 => /usr/X11R6/lib/libX11.so.6 (0x40f08000)
        libm.so.6 => /lib/libm.so.6 (0x40fbf000)
        libc.so.6 => /lib/libc.so.6 (0x40fe1000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

> Does this happen if you download
>  	http://www.ethereal.com/sample/v6.pcap
Yes, unfortunally.

>
> No, because there *IS* no "default reading format" in Ethereal;
> Ethereal looks at the file's header and contents to determine the type
> of the file.
But it is what happening. If I save the "corrupted" using the "libpcap"
format the next capture is OK.