Wireshark · Ethereal-users: [Ethereal-users] Corrupt libpcap files

["Tim Everitt" <tim.everitt@xxxxxxxx>]

Has anyone else out there had the pleasure of trying to rescue corrupt
libpcap files?

The files were NOT collected through ethereal which is outstanding and where
I've had no problems.

Some of the frames have lengths set to hexFFFF... a bit on the large size.
All the ethereal suite of software simply stops dead at the first such frame
as it can't locate the start of the next frame.

I could resort to a hex editor and try to locate the faulty frame and the
start of the next frame and correct the length. Does anyone have a better
solution such as a libpcap file browser or editor?

Regards and thanks to all on the ethereal team.
Tim Everitt.