ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] pcap: File has 3379042344-byte packet, bigger than maximum

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 27 Jun 2002 02:24:14 -0700
On Wed, Jun 26, 2002 at 10:32:46AM +0200, Ruud Huynen wrote:
> > >>> Guy Harris <gharris@xxxxxxxxx> 26.06.2002 07:56:18 >>>
> > Does this happen when you're capturing packets with Ethereal, or does it
> > happen when you try to read a capture from from another machine?
> 
> This happens during or after I press the stop button. The dos window
> with the errormessage hides behind the working window, so I don't realy know.

Well, presumably you know whether you're doing a capture or not.  The
fact that you metion the stop button seems to indicate that you're
capturing with Ethereal, and those messages occur while capturing or
after capturing, not when you are reading a capture file that was
captured earlier or captured on another machine.

Are you doing an "Update list of packets in real time" capture?

> > pcap: File has 3379042344-byte packet, bigger than maximum of 65535

Is that number one of the numbers you saw?  It looks suspiciously like an
IP address - 201.104.24.40.