Wireshark-users: Re: [Wireshark-users] Upgraded wireshark to 1.2.6 but now old pcap files cannot

From: Kok-Yong Tan <ktan@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 23 Mar 2010 22:04:29 -0400

On Mar 23, 2010, at 21:50, Guy Harris wrote:


On Mar 23, 2010, at 6:41 PM, Kok-Yong Tan wrote:

Compiled with GTK+ 2.18.7, with GLib 2.22.5, with libpcap 1.0.0, with
libz 1.2.4,

Was the version that worked also compiled with libz 1.2.4, or was it built with an earlier version?


I'm not sure. I wiped the entire MacPorts installation and the whole /opt/local tree and restarted from scratch by downloading the Tiger version of MacPorts, installing it, then typing "port install wireshark".

One other thing: I figured that if a previously saved file was giving me problems, a fresh capture off a live connection would work so I tried to start one. I saw the first 41 packets and then wireshark stopped capturing (normally the screen would scroll as packets continued to be captured). When I clicked on the "Stop capture" button, I again saw the same error as before ("The capture file appears to be damaged or corrupt...") when I haven't even saved anything yet, let alone attempt to load any file. Hence I'm beginning to doubt if it's a truly corrupted capture file that was previously saved.
--
Reality Artisans, Inc.             #   Network Wrangling and Delousing
P.O. Box 565, Gracie Station       #   Apple Certified Consultant
New York, NY 10028-0019            #   Apple Consultants Network member
<http://www.realityartisans.com>   #   Apple Developer Connection member
(212) 369-4876 (Voice) # My PGP public key can be found at <https://keyserver.pgp.com>