>> Every time I click on *one* packet on the topmost window repeatedly,
>> different bytestream appears on the lowermost window. Strangely
>> enough, topmost window decodes just fine.
>The topmost window is built when Ethereal reads the capture file
>sequentially; it doesn't rebuild it when you click on a packet.
>The middle window is constructed dynamically when you click on the
>packet; Ethereal seeks to the place in the capture file that contains
>that packet's data, and reads the packet data.
seek offset is typed "int" in "wiretap" subdir.
I believe off_t should be used.
>> >Can you post the trace file, if it's not too large?
>> The packet capture file (when I save the capture) looks just fine
>> with od -x.
>But it doesn't look just fine with Ethereal; can you reproduce the
>problem when you read the saved capture file? If so, sending us the
>capture file could let us run Ethereal with it and see what it's doing
>when it's supposed to be seeking to the part of the file containing the
>data for the packet in question, and fix it to do the right thing than
>whatever it's currently doing.
Placed the file into:
ftp://ftp.itojun.org/hidden/ethereal-trouble
(you can't do "ls" in hidden directory)
The file was saved by latest ethereal. Latest ethereal
dumps it in a strange manner when it captured this stream, and
when opened the file. 0.7.5 opens the file just fine.
Thank you very much for your help!
itojun
