Ethereal-users: [Ethereal-users] Ethereal "capture file damaged/corrupt", pcap "file bigger than

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Andrew J.Gavin <GAVINA@xxxxxxxxxxxxxxxx>
Date: Sun, 20 Jan 2002 23:19:15 GMT
Hello list,

I have used all combinations of Ethereal 0.8.20, Ethereal
0.9.0, libpcap 0.4.0, libpcap 0.6.1, and libpcap 0.6.2, but
I still get the same error every time.

After stopping a data capture, either on eth0 or on
loopback, Ethereal pops up a window saying "The capture file
appears to be damaged or corrupt."  Additionally, the
console complains that "Message: pcap: File has [a large
number]-byte packet, bigger than maximum of 65535".

This error also occurs when I try to open capture files,
including those available at http://www.ethereal.com/sample.

This error does not happen when Ethereal updates the list of
packets in real time.

I have another machine that runs libpcap 0.6.2 and Ethereal
0.9.0 with no issues.  Any ideas as to what could be the
source of the problem?  Thanks.