Wireshark-bugs: [Wireshark-bugs] [Bug 6694] Error reading some capture files created by "netsh"
Date: Fri, 23 Dec 2011 18:36:01 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6694

Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|unspecified                 |SVN
            Summary|can not open capture files  |Error reading some capture
                   |created by "netsh" or       |files created by "netsh" or
                   |Network Monitor 3.4         |Network Monitor 3.4 with
                   |                            |64-bit Wireshark

--- Comment #1 from Guy Harris <guy@xxxxxxxxxxxx> 2011-12-23 18:35:59 PST ---
It's definitely possible to open at least some capture files created by NetMon
3.4 - I've just run NetMon 3.4 to do a capture and read the resulting capture
file both with a 64-bit version of capinfos on UN*X (Mac OS X 10.6, in this
case) and a 32-bit version of capinfos on Windows XP, both built from recent
checkouts from the trunk.

A couple of possibilities come to mind:

    1) this is a problem only with 64-bit versions of Wireshark on Windows;

    2) this is only a problem with some Network Monitor-format capture files.

To determine whether the first of those is the case, try both the 32-bit and
64-bit versions of Wireshark 1.6.4 from the Wireshark download page.

To allow us to determine whether the second is the case, we'd need to see a
capture file that the version of Wireshark you built can't read.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.