Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3096] Ability to annotate packet captures

Date: Wed, 22 Feb 2012 11:42:31 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3096

--- Comment #71 from Guy Harris <guy@xxxxxxxxxxxx> 2012-02-22 11:42:26 PST ---
Comment on attachment 7799
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7799
sample packets with comments

The "sample packets with comments" capture has an invalid Enhanced Packet Block
- the block length is 128 bytes, but it claims to have a packet with 98 bytes
of captured data, which is too long to fit in a 128-byte EPB (that requires 132
bytes, including padding to a multiple of 4 bytes).

A change was checked into the trunk to detect that and report it as an error,
and will be backported to the 1.6 and 1.4 branches.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.