https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7350
Summary: pcap-ng - most files created by editcap -c have no IDB
Product: Wireshark
Version: 1.8.0
Platform: x86-64
OS/Version: Windows 7
Status: NEW
Severity: Major
Priority: Low
Component: Extras
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: jasper.bongertz@xxxxxxxxxxxx
Build Information:
Version 1.8.0rc1 (SVN Rev 43134 from /trunk-1.8)
Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with PortAudio
V19-devel (built Jun 6 2012), with AirPcap.
Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.
Built using Microsoft Visual C++ 10.0 build 40219
--
When using editcap to split a trace into multiple smaller files using the "-c"
parameter only the first file will have an Interface Description Block. All
other files will not have one, even though it is mandatory for pcap-ng files.
They also do not seem to have an ISB at the end of the file.
I think each file must have all interfaces of the original file in an IDB block
because otherwise the interface index of the packet blocks cannot be matched to
an interface entry.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.