Wireshark-bugs: [Wireshark-bugs] [Bug 5869] Enhancements to Network Instruments Observer file fo
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 2 May 2011 22:53:58 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5869

--- Comment #7 from Guy Harris <guy@xxxxxxxxxxxx> 2011-05-02 22:53:57 PDT ---
Note, however, that there's no guarantee that sizeof(packet_header) +
phdr->caplen will fit in 16 bits.  Normally, it should, as frame sizes
shouldn't be that big; however, I think some network adapters, drivers, and
OSes that do TCP large segment offloading might supply, in a capture, a
faked-up Ethernet packet that's bigger than a normal Ethernet packet, as it's
really a bunch of reassembled TCP segments.  *Shark might have to, at that
point, return an error if the packet size is too big.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.