Wireshark · Wireshark-users: Re: [Wireshark-users] Upgraded wireshark to 1.2.6 but now old pcap files cannot be read

[Kok-Yong Tan <ktan@xxxxxxxxxxxxxxxxxxx>]

On Mar 23, 2010, at 21:50, Guy Harris wrote:

> On Mar 23, 2010, at 6:41 PM, Kok-Yong Tan wrote:
>
> > Compiled with GTK+ 2.18.7, with GLib 2.22.5, with libpcap 1.0.0, with
> > libz 1.2.4,
>
> Was the version that worked also compiled with libz 1.2.4, or was  
> it built with an earlier version?


I'm not sure.  I wiped the entire MacPorts installation and the  
whole /opt/local tree and restarted from scratch by downloading the  
Tiger version of MacPorts, installing it, then typing "port install  
wireshark".

One other thing:  I figured that if a previously saved file was  
giving me problems, a fresh capture off a live connection would work  
so I tried to start one.  I saw the first 41 packets and then  
wireshark stopped capturing (normally the screen would scroll as  
packets continued to be captured).  When I clicked on the "Stop  
capture" button, I again saw the same error as before ("The capture  
file appears to be damaged or corrupt...") when I haven't even saved  
anything yet, let alone attempt to load any file.  Hence I'm  
beginning to doubt if it's a truly corrupted capture file that was  
previously saved.
--
Reality Artisans, Inc.             #   Network Wrangling and Delousing
P.O. Box 565, Gracie Station       #   Apple Certified Consultant
New York, NY 10028-0019            #   Apple Consultants Network member
<http://www.realityartisans.com>   #   Apple Developer Connection member
(212) 369-4876 (Voice)             #   My PGP public key can be found  
at <https://keyserver.pgp.com>