Wireshark · Wireshark-dev: Re: [Wireshark-dev] Tshark closing unexpectedly due to failure reading from file

[Guy Harris <gharris@xxxxxxxxx>]

On Nov 20, 2020, at 1:18 AM, James Ko <jck@xxxxxxxxxx> wrote:

> I just have one question about the fix.. Is it okay to send multiple SP_FILE indications on the same file?

No.

The current version of the merge request only sends one.

> If the pcapng stream inserts a new SHB to start a new section does dumpcap restart with a new temp file or does it continue with passthrough on the same file?

It should continue with passthrough on the same file.