> If so, what program was it?
Well, if Rene Peters on the NetApp "dl-linux" list was right, it was
Ethereal, but the message *wasn't* "can't load files biger than 6500k",
it was
Message: pcap: File has 117441824-byte packet, bigger than maximum of
65535
which means that the capture file was somehow damaged (and nothing else
will be able to read it either).
With what tool was that capture file captured? The suffix of the file
was ".trc" - the suffix that we decided to use for libpcap capture files
inside ONTAP, the fact that it is used by Sniffers for "T"oken "R"ing
"c"aptures nonwithstanding - so it may have come from some version of
ONTAP (perhaps a NetCache version, from the strings found in it).
Was it transferred using FTP? If so, was it transferred in ASCII or
binary mode? If it was transferred in ASCII mode, it would probably
have gotten corrupted in the transfer process.
Either mail me the capture file or a path to the capture file that I can
use inside NetApp, and I can look at it to see what the damage might
have been.