Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1937] New: K12 capture file format errors

Date: Wed, 24 Oct 2007 15:11:58 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1937

           Summary: K12 capture file format errors
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: magnus@xxxxxxxxx


Build Information:
Downloaded from web, SVN22276
--
Short K12 capture files are not handled correctly. magnus.k12 was captured and
saved as a K12 file as 200 kB. No problem. Opening with emacs and leaving only
packets so that the file is 15 KB resulted in magnus_long_ETHER.k12. This
cannot be opened in Wireshark. Substituting the string 'ETHER' with 'ETHERNET'
in the capture file results in file magnus_long_ETHERNET.k12. This file can be
opened. Cutting further down on packet size is magnus_short_ETHERNET.k12, which
cannot be opened.

The exact limits of size and how the string change relates to this is unclear.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.