ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 3895] Save-As Nokia tcpdump corrupts the file

Date: Tue, 20 Dec 2011 10:26:41 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3895

--- Comment #7 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-12-20 10:26:37 PST ---
(In reply to comment #6)
> Created an attachment (id=7193)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7193) [details]
> Nokia tcpdump bugfix
> 
> Took Chris's suggestion of creating a new nokia pseudo-header and writing it
> back out again.  No file heuristic changes.  Made an assumption that packets
> within the file would always have ethernet frames (new nokia pseduo-header
> includes ethernet pseudo header used in packet processing)

If I apply the patch and select only a single packet to save to a new file,
then try to open that file, I get a popup dialog indicating, "The capture file
appears to have been cut short in the middle of a packet."  This doesn't happen
if saving more than 1 packet.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.