We're now a non-profit! Support open source packet analysis by making a donation.

Wireshark-users: Re: [Wireshark-users] Reading tshark output using wireshark

From: "Philipp Walther" <pwalther@xxxxxxxxxxxx>
Date: Mon, 30 Apr 2007 03:56:08 -0400
> > This does not seem to work yet, as I get the error "The 
> capture file 
> > appears to be damaged or corrupt.
> > (pcap: File has 1342289141-byte packet, bigger than maximum 
> of 65565)"
> Did you by any chance use FTP to transfer the data? Since you 
> used the extension ".txt" instead of something like ".pcap", 
> most FTP clients will automatically treat it like ASCII and 
> convert the bare LF's in the file to "CR/LF".

Funny, I used scp which (AFAIK) is binary, but I just gzipped
it and renamed it to pcap and it worked... Must be the scp-client
that is that stupid who knew? :-)