Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2432] failed tshark PDML export to file

Date: Fri, 9 Dec 2011 23:19:03 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2432

Chris Maynard <christopher.maynard@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #7548|                            |review_for_checkin?
               Flag|                            |

--- Comment #6 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-12-09 23:19:00 PST ---
Created an attachment (id=7548)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7548)
Try to fix the incorrect "pos=0" values.

The patch fixes most of the incorrect "pos=0" values; however, there are some
that aren't corrected:  expert info, malformed and I'm not sure about
"must-be-zero".  That one has "pos=668"; yet there are fields above it with
"pos=[669-671]".  I am guessing that it is a sort of bug in the dissector where
that field is either not being added in the right place or the offset specified
for the field is wrong.

I don't know how robust/acceptable this patch is, but it seems to work pretty
well for the attached capture file.  Maybe someone could take a look and see if
it seems reasonable?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.