Wireshark-bugs: [Wireshark-bugs] [Bug 12167] "total block length ... is too large" error when op

Date: Wed, 24 Feb 2016 20:32:19 +0000

Comment # 1 on bug 12167 from
(In reply to Ondrej Holecek from comment #0)
> Additionally - is there any reason why not to support multi SHB pcaps?

Yes - pcap doesn't contain SHBs. :-)

(You mean "captures" or "pcapng files", not "pcaps".)

> seems to work good when I remove the code that forbids that (I haven't done
> any big tests though).

Did you try it with a file constructed by concatenating a big-endian pcapng
file and a little-endian pcapng file?  Nothing in the pcapng spec requires that
all sections have the same byte order.

Make sure it works with Wireshark, too - and doesn't get confused by the
resetting of the interface list in the second section.


You are receiving this mail because:
  • You are watching all bug changes.