Wireshark-bugs: [Wireshark-bugs] [Bug 9200] Wireshark can't open PCAPng files using Simple Packe
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 28 Sep 2013 20:15:56 +0000

changed bug 9200

What Removed Added
Status CONFIRMED RESOLVED
Resolution --- FIXED

Comment # 4 on bug 9200 from 
Fifth problem: the capture length has to be the minimum of:

     the number of bytes available for packet data in the block (it obviously
can't be greater than that);

     the snapshot length from the IDB (which should limit the length of all
packets);

     the packet length (you can't capture bytes that aren't there).

The first of the three values will always be a multiple of 4 in a valid pcap-ng
file, so there needs to be *some* way to eliminate padding.  The second value
will do so if the snapshot length is less than the amount of bytes available
for packet data, but not if it's greater; the third value will do so if the
packet length is less than the amount of bytes available for packet data, but
not if it's greater.  Therefore, we need to do both of the latter two checks.

Fixed in r52250 and backported to the 1.8 and 1.10 branches.

You are receiving this mail because:
  • You are watching all bug changes.