Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 10190] The .cap files generated from Message Analyzer use

Date: Mon, 07 Jul 2014 15:13:01 +0000

Comment # 14 on bug 10190 from
(In reply to comment #9)
<snip?
> Ken, could you send Kim a message about this?
> We need to know from somebody at Microsoft:
>     What is the correct way to handle NetMon files - the way NetMon 3.4
> reads them, or the way Message Analyzer writes them?
>     And, if the format version is 2.0 but ExtendedInfoOffset is non-zero,
> meaning that the packets *do* have record trailers, should the record
> trailer's MediaType and ProcessInfoIndex fields be used?

I will post his reply.  Thank you for working on this.


You are receiving this mail because:
  • You are watching all bug changes.