Wireshark · Wireshark-dev: [Wireshark-dev] The specified beginning of a packet range "1-725000" isn't a decimal number

[Richard Sharpe <realrichardsharpe@xxxxxxxxx>]

Hi,

I was trying to use editcap (2.3.0) on a RHEL 7.2 system to chop a
large packet capture up into smaller pieces:

------------------
editcap -rv ~/tcpdump_dme_pdfs-1.pcap ~/tcpdump_dme_pdfs-1-2.pcap 1-725000
File /home/rsharpe/tcpdump_dme_pdfs-1.pcap is a Wireshark/tcpdump/...
- pcap capture file.
Add_Selected: 1-725000
Inclusive ...editcap: The specified beginning of packet range
"1-725000" isn't a decimal number
------------------

I have tracked this down to wsutil/clopts_common.c

guint32
get_guint32(const char *string, const char *name)
{
  guint32 number;

  if (!ws_strtou32(string, NULL, &number)) {
    if (errno == EINVAL) {
      cmdarg_err("The specified %s \"%s\" isn't a decimal number",
name, string);
      exit(1);
    }
    cmdarg_err("The specified %s \"%s\" is too large (greater than %d)",
               name, string, number);
    exit(1);
  }
  return number;
}

which eventually calls g_ascii_strtoull via another function.

Has anyone seen this issue before? Is it a bad version of glib-devel?

I do not see the same problems on Windows with 2.2.4.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)