| Bug ID |
12547
|
| Summary |
editcap -r stops writing packets at the end of the first selection or range
|
| Product |
Wireshark
|
| Version |
Git
|
| Hardware |
x86
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
Extras
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 14670 [details]
Patch to fix.
Build Information:
TShark (Wireshark) 2.1.1-git (v2.1.1rc0-187-g2dc3e52 from unknown)
Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with libpcap, without POSIX capabilities, with libnl 3, with
GLib 2.28.8, with zlib 1.2.3, without SMI, with c-ares 1.10.0, with Lua 5.1,
without GnuTLS, with Gcrypt 1.4.5, with MIT Kerberos, with GeoIP.
Running on Linux 2.6.32-573.22.1.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.4.0, with Gcrypt 1.4.5, with zlib 1.2.3.
Intel(R) Core(TM) i5-3340M CPU @ 2.70GHz (with SSE4.2)
Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-17).
--
The change in bug 9686 is broken. The test for setting max_packet_number
(max_selection in add_selected) is wrong, and is set to the maximum packet
number in the first selection or range given on the command line.
Expected behavior:
./editcap -v -r in.pcap out.pcap 1 50 100
File /home/johnthac/m0_zte_capture.pcap is a Wireshark/tcpdump/... - pcap
capture file.
Add_Selected: 1
Not inclusive ... 1
Add_Selected: 50
Not inclusive ... 50
Add_Selected: 100
Not inclusive ... 100
Packet: 1
Packet: 50
Packet: 100
Actual behavior:
./editcap -v -r int.pcap out.pcap 1 50 100
File /home/johnthac/m0_zte_capture.pcap is a Wireshark/tcpdump/... - pcap
capture file.
Add_Selected: 1
Not inclusive ... 1
Add_Selected: 50
Not inclusive ... 50
Add_Selected: 100
Not inclusive ... 100
Packet: 1
You are receiving this mail because:
- You are watching all bug changes.
