Wireshark · Ethereal-dev: Re: [ethereal-dev] random data on dump window

[Guy Harris <guy@xxxxxxxxxx>]

> 	Every time I click on *one* packet on the topmost window repeatedly,
> 	different bytestream appears on the lowermost window.  Strangely
> 	enough, topmost window decodes just fine.  

The topmost window is built when Ethereal reads the capture file
sequentially; it doesn't rebuild it when you click on a packet.

The middle window is constructed dynamically when you click on the
packet; Ethereal seeks to the place in the capture file that contains
that packet's data, and reads the packet data.

It may be that, somehow, Ethereal isn't properly seeking to the right
place in the capture file.

> >Can you post the trace file, if it's not too large?
> 
> 	The packet capture file (when I save the capture) looks just fine
> 	with od -x.

But it doesn't look just fine with Ethereal; can you reproduce the
problem when you read the saved capture file? If so, sending us the
capture file could let us run Ethereal with it and see what it's doing
when it's supposed to be seeking to the part of the file containing the
data for the packet in question, and fix it to do the right thing than
whatever it's currently doing.