Wireshark-bugs: [Wireshark-bugs] [Bug 6735] "Save As..." of capture files in a format that Wires
Date: Sat, 14 Jan 2012 01:34:27 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6735

Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Wrong extension when save   |"Save As..." of capture
                   |NetMonitor File (TXT and    |files in a format that
                   |not CAP)                    |Wireshark can write doesn't
                   |                            |default to that format

--- Comment #2 from Guy Harris <guy@xxxxxxxxxxxx> 2012-01-14 01:34:27 PST ---
The problem isn't the extension - Wireshark doesn't care what the file's
extension is, it tries to determine the file type based *only* on the file's
contents - it's the format in which the file is written.  DisplayARP.cap is in
Tektronix K12 text output format, which, for various reasons, ends up being the
default or, at least, the first format displayed even if the file can be saved
in its own format.

There may also be a bug in the code that writes K12 text format or that reads
K12 text format causing frame 4 to be malformed.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.