Ethereal-users: Re: [Ethereal-users] Capture conversions

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Sun, 23 Feb 2003 23:04:44 +0100
Martin Regner wrote:
<05 00   Number of packets stored (I think) = 5 
<       (only 5 will be visible since captured with demo version but there are really a few more packets in the file.
<      The demo file that was included had value "06 00" and there was 6 packets that I could view)

Changing the value to 7 with a hex-editor made NetProb32 show the 7 first packets in the file.
Changing the value to 8 made NetProb32 show all 8 packets in the file.

<3C 00   number of octets  (size=64)
<3C 00   snaplen

Oooops, size=60 for these packets!