Wireshark · Ethereal-users: Re: [Ethereal-users] pcap: File has 4294949296-byte packet, bigger than maximum of 65535

[Guy Harris <gharris@xxxxxxxxx>]

Stephen Youndt wrote:

> I suspect an alignment or endian problem, but I don't have enough 
> experience with the source to even begin to debug it.

It's probably not an endian problem; if you can send me one of the 
captures, I can check whether it's purely an endian problem, by seeing 
whether I can read it on my big-endian PowerBook.

I suspect it's not an alignment problem, either.

It *might* be a problem with the heuristics Ethereal uses to try to 
guess which of the incompatible formats, with the same magic number, the 
file is in.