Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] "File has packet larger than file's snapshot length." warnin

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 15 Jul 2013 10:51:46 -0700
On Jul 14, 2013, at 5:26 PM, "Turney, Cal" <cal.turney@xxxxxxx> wrote:

>>> Are you saying that rather than adding an option to ignore snapshot_length/packet size discrepancies it might be best to not generate these warnings?
> 
>> Yes.  I.e., it might be best to just hardwire in the "ignore those discrepancies" option.
> 
> OK.  I'll submit a patch that adds the option "Do NOT issue a warning if the packet size exceeds the snapshot length in the capture header." in Preferences>Protocols>Frame and set the default to not issue a warning (checkmark set).  If unchecked, the warning will be "pcap: <n>-byte packet exceeds snapshot length of <n>." rather than "pcap: File has packet larger than file's snapshot length."    

So, again, why bother offering the option to issue the warning at all?  Why not just remove it - i.e., hardwire in the "do NOT issue a warning..." option?