Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6846] New: Incompatible pcapng file formats between wiresh

Date: Wed, 15 Feb 2012 15:17:51 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6846

           Summary: Incompatible pcapng file formats between wireshark
                    1.7.1-svn-4xxxx and previous versions
           Product: Wireshark
           Version: 1.7.x (Experimental)
          Platform: x86-64
        OS/Version: Red Hat
            Status: NEW
          Severity: Major
          Priority: Low
         Component: TShark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: jpo@xxxxxxxxxxxx


Build Information:
$ ./dumpcap -v
Dumpcap 1.7.1-SVN-41030 (SVN Rev Unknown from unknown)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.30.2, with libpcap, with libz 1.2.5, with POSIX
capabilities (Linux).

Running on Linux 3.2.5-3.fc16.x86_64, with locale en_US.UTF-8, with libpcap
version 1.2.1, with libz 1.2.5.

Built using gcc 4.6.2 20111027 (Red Hat 4.6.2-1).

See http://www.wireshark.org for more information.
--
I have created a couple of pcapng files with recent dumpcap development
versions that can't be processed with previous versions of wireshark.

System: Fedora 16 x86_64

1) pcapng file created with dumpcap 1.7.1-SVN-41032 in order to test the new
SHB
   options support.


   # sandbox/wireshark-1.7.1-SVN-41032/dumpcap -i p132p1 -c 4 \
   -w  /tmp/pcapng_rev41032_shb.pcapng
   Capturing on p132p1
   File: /tmp/pcapng_rev41032_shb.pcapng
   Packets captured: 4
   Packets received/dropped on interface p132p1: 4/0 (100.0%)


2) sandbox/wireshark-1.7.1-SVN-41032/capinfos /tmp/pcapng_rev41032_shb.pcapng

   [output minus the debug output that was left enabled in commit 41032]
   ...
   File name:           /tmp/pcapng_rev41032_shb.pcapng
   File type:           Wireshark - pcapng
   File encapsulation:  Ethernet
   Packet size limit:   file hdr: (not set)
   Number of packets:   4
   File size:           864 bytes
   ...


3) using capinfos from wireshark 1.6.5

   # capinfos
   Capinfos 1.6.5 (SVN Rev Unknown from unknown)
   ...

   # capinfos /tmp/pcapng_rev41032_shb.pcapng
   capinfos: Can't open /tmp/pcapng_rev41032_shb.pcapng: The file isn't a
capture file in a known format

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.