Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 7381] pcapng - mergecap generates unusable file if interface index 0 has no pa

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7381

Ph. Marek <philipp+wireshark@xxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |philipp+wireshark@xxxxxxxxx
                   |                            |v.at

--- Comment #12 from Ph. Marek <philipp+wireshark@xxxxxxxxxxxxx> 2012-07-12 06:06:56 PDT ---
JFI, the interface number can be quite high ("-i any"):

mergecap: Error reading ...pcap: The file appears to be damaged or corrupt.
(pcapng: interface index 1024 is not less than interface count 1.)

Whether that's because of a bonding device or the virtual tap adapters I didn't
test, though.


If libpcap (currently) doesn't offer a way to get the MAC address, how about
taking the MAC of the first outgoing packet for identifying?
I know that this might be wrong, but I think it might be a good guess until
libpcap supports asking for the address.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.