Wireshark-dev: Re: [Wireshark-dev] Tshark closing unexpectedly due to failure reading from file

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 20 Nov 2020 01:43:38 -0800
On Nov 20, 2020, at 1:18 AM, James Ko <jck@xxxxxxxxxx> wrote:

> I just have one question about the fix.. Is it okay to send multiple SP_FILE indications on the same file?

No.

The current version of the merge request only sends one.

> If the pcapng stream inserts a new SHB to start a new section does dumpcap restart with a new temp file or does it continue with passthrough on the same file?

It should continue with passthrough on the same file.