Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 6846] Incompatible pcapng file formats between wireshark 1.7.1-svn-4xxxx and p

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6846

--- Comment #2 from Guy Harris <guy@xxxxxxxxxxxx> 2012-02-15 18:42:47 PST ---
There are two possibilities here:

    1) the new dumpcap is not writing valid pcap-NG files;

    2) the pcap-NG reading code in the older versions of Wireshark can't read
all valid pcap-NG files.

Given that a file I just wrote with top-of-trunk dumpcap can be read by a
tcpdump linked with top-of-trunk libpcap, my guess is that 2) is the correct
answer.  Perhaps their open routines don't handle SHBs with options.  I'll look
at that and, if that's the case, schedule fixes for 1.4.x and 1.6.x (people
stuck using older versions of Wireshark will have to do the fix themselves -
the pcap-NG spec allows options, so we shouldn't just avoid them forever just
because older versions of Wireshark have bugs and some organizations have
annoying IT policies).

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.