Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3895] Save-As Nokia tcpdump corrupts the file

Date: Tue, 20 Dec 2011 16:02:57 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3895

--- Comment #9 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-12-20 16:02:56 PST ---
(In reply to comment #8)
> Interesting...  I'll take a look.  My testing just involved resaving the
> provided sample file in full.

Unfortunately, as Bill pointed out in comment 4:
> PS: File->Save As -> All Packets/Captures works because in this case Wireshark 
> just copies the file (if the format isn't being changed).

My guess is that there is something different in the extra bytes when there is
only a single packet in the file vs. multiple packets.  I think it would be
helpful if a Nokia capture file could be provided by someone that contains only
a single packet so that the extra bytes could be compared.  It's only a guess
though.  There might be some other reason, but at least that would help to rule
it in/out.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.