When I download and un-gzip the imap sample capture,
http://www.ethereal.com/sample/imap.cap.gz
I get:
[user@host dir]$ tethereal -v
tethereal 0.9.0, with GLib 1.2.10, with libpcap 0.5, with libz 1.1.3, with
UCD SNMP 4.1.2
[user@host dir]$ tethereal -r imap.cap
1 0.000000 infinity.cc.umr.edu -> 131.151.37.122 TCP 4167 > imap [SYN]
Seq=4048628786 Ack=0
Win=32120 Len=0
...
8 0.006013 infinity.cc.umr.edu -> 131.151.37.122 IMAP Request: a0001
LOGIN "neulingern" "XXXXX"
Message: pcap: File has 1358954496-byte packet, bigger than maximum of 65535
tethereal: "imap.cap" appears to be damaged or corrupt.
It looks like a corrupt file or a pcap problem, but this file is on the
ethereal web site. Can anyone successfully read this file?
-steve