https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3606
Summary: Saving pcap capture file with ERF encapsulation creates
an invalid pcap file
Product: Wireshark
Version: SVN
Platform: All
OS/Version: All
Status: NEW
Severity: Normal
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: wmeier@xxxxxxxxxxx
Build Information:
--
Wireshark:
a. Open a file with ERF encapsulation;
b. "Save As" selected packets (not the whole file since that will just copy the
file);
The output file format will be invalid. ("file has ... packet, bigger than
maximum of 65535").
Using editcap with an input ERF encapsulated file will also produce a bad
output file.
(I'm assuming that this happens on all OS's although I've only tried Windows).
(This is the cause of Bug #3569).
I'll have a look-see at the code....
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.