Ethereal-users: Re: [Ethereal-users] pcap: File has 4294949296-byte packet, bigger than maximum

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 16 Dec 2004 03:19:59 -0800
Stephen Youndt wrote:

I suspect an alignment or endian problem, but I don't have enough experience with the source to even begin to debug it.

It's probably not an endian problem; if you can send me one of the captures, I can check whether it's purely an endian problem, by seeing whether I can read it on my big-endian PowerBook.

I suspect it's not an alignment problem, either.

It *might* be a problem with the heuristics Ethereal uses to try to guess which of the incompatible formats, with the same magic number, the file is in.