Wireshark-users: Re: [Wireshark-users] Upgraded wireshark to 1.2.6 but now old pcap files cannot

From: Kok-Yong Tan <ktan@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 23 Mar 2010 22:04:29 -0400
On Mar 23, 2010, at 21:50, Guy Harris wrote:

On Mar 23, 2010, at 6:41 PM, Kok-Yong Tan wrote:

Compiled with GTK+ 2.18.7, with GLib 2.22.5, with libpcap 1.0.0, with
libz 1.2.4,
Was the version that worked also compiled with libz 1.2.4, or was  
it built with an earlier version?

I'm not sure. I wiped the entire MacPorts installation and the whole /opt/local tree and restarted from scratch by downloading the Tiger version of MacPorts, installing it, then typing "port install wireshark".
One other thing:  I figured that if a previously saved file was  
giving me problems, a fresh capture off a live connection would work  
so I tried to start one.  I saw the first 41 packets and then  
wireshark stopped capturing (normally the screen would scroll as  
packets continued to be captured).  When I clicked on the "Stop  
capture" button, I again saw the same error as before ("The capture  
file appears to be damaged or corrupt...") when I haven't even saved  
anything yet, let alone attempt to load any file.  Hence I'm  
beginning to doubt if it's a truly corrupted capture file that was  
previously saved.
--
Reality Artisans, Inc.             #   Network Wrangling and Delousing
P.O. Box 565, Gracie Station       #   Apple Certified Consultant
New York, NY 10028-0019            #   Apple Consultants Network member
<http://www.realityartisans.com>   #   Apple Developer Connection member
(212) 369-4876 (Voice) # My PGP public key can be found at <https://keyserver.pgp.com>