Wireshark-bugs: [Wireshark-bugs] [Bug 9054] vwr heuristic dissector mis-identifies ERF file
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 20 Aug 2013 23:57:26 +0000

Comment # 1 on bug 9054 from 
(In reply to comment #0)
> A temporary work-around is to re-order the heuristic dissectors, but I can't
> help feeling that more needs to be done. Even if ERF has a magic number
> added there are many heuristic dissectors supported.

Well, if it had a magic number these problems wouldn't show up for ERF files,
but, yes, they would happen for file types that require heuristics to
recognize.

> Could we have a wtap option to override the file type?

I'd prefer not to require the user to have to tell Wiretap what type of file to
assume a given file is - that would require UI changes to a bunch of programs.

> Could wtap_open_offline() use the file extension as a file type preference?
> E.g. try the registered file extension dissector first, if unclaimed then
> run the magic/heuristic dissectors in order?

That would probably be a good idea.  (It gets tricky for ".cap", as there is no
single file reader associated with ".cap", as a lot of network analyzer writers
didn't have much imagination when picking extensions.)

You are receiving this mail because:
  • You are watching all bug changes.