Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2143] New: "Save As [filename] all packets displayed" seem

Date: Thu, 27 Dec 2007 12:34:36 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2143

           Summary: "Save As [filename] all packets displayed" seems
                    truncate some packets
           Product: Wireshark
           Version: SVN
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: mantovani@xxxxxxxx


Build Information:
Version 0.99.8-SVN-23949 (SVN Rev 23949)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.3, with GLib 2.14.4, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with SMI 0.4.5, with ADNS, with Lua 5.1,
with
GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio PortAudio
V19-devel, with AirPcap.

Running on Windows 2000 Service Pack 4, build 2195, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
I've a large trace, I apply a filter SIP||RTP, filtering is OK.
Now I "save as [filename] all packets as displayed".
I open the just saved file and some packets appears truncated.

I've tried various version of Wireshark/Ethereal, and they all show the same
problem.

I have the original trace and the saved one, I do not post in BZ because of
size but I can send to anybody that needs it.
I will post two gifs showing the problem.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.