https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #16 from Gerrit Code Review ---
Change 36981 had a related patch set uploaded by Guy Harris:
Support reading mixed-byte-order pcapng files.
https://code.wireshark.org/review/36981
--
You are receiving this mail because:
You
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
Guy Harris changed:
What|Removed |Added
Hardware|x86 |All
--
You are receiving this mail
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
Guy Harris changed:
What|Removed |Added
Status|RESOLVED|CONFIRMED
Ever confirmed|0
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
TheDiveO changed:
What|Removed |Added
Status|UNCONFIRMED |RESOLVED
Resolution|---
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #13 from TheDiveO ---
Thank you for clarifying!
--
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #12 from Gerrit Code Review ---
Change 33198 had a related patch set uploaded by Guy Harris:
Don't pretend we can handle multiple-section pcapng files when we can't.
https://code.wireshark.org/review/33198
--
You are
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #11 from Guy Harris ---
(In reply to TheDiveO from comment #8)
> Do I correctly understand your analysis in that when using extcap/piping,
> the machine capturing packets and the Wireshark machine needs to be both of
> the
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #10 from Guy Harris ---
(In reply to Tomasz Mon from comment #4)
> Could you please provide some mixed-endian pcapng file that contains some
> actual data packets?
...because that probably won't work. The current code does
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #9 from Guy Harris ---
(In reply to TheDiveO from comment #0)
> - le-shb.pcapng: contains a single SHB in LE, with interface block also in
> BE.
Presumably meaning "also in LE", as running Wireshark in "Fileshark mode"
(start
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
Guy Harris changed:
What|Removed |Added
Attachment #17066|contains a single SHB in|contains a single SHB in
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #8 from TheDiveO ---
Do I correctly understand your analysis in that when using extcap/piping, the
machine capturing packets and the Wireshark machine needs to be both of the
same endianess? Is this correct?
--
You are
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #7 from Guy Harris ---
(In reply to TheDiveO from comment #5)
> The issue I see is that with Wireshark reading from the pipe it has given an
> extcap plugin, Wireshark already fails with an error message as soon as it
> sees
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #6 from Guy Harris ---
At least part of the problem is that
1) x86 is little-endian
and
2) we don't support piping byte-swapped pcapng (or pcap, I suspect) files to
dumpcap
so you can't pipe big-endian files to pcapng on
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
Guy Harris changed:
What|Removed |Added
See Also||https://bugs.wireshark.org/
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
Tomasz Mon changed:
What|Removed |Added
Component|Capture file support|Dumpcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #5 from TheDiveO ---
The issue I see is that with Wireshark reading from the pipe it has given an
extcap plugin, Wireshark already fails with an error message as soon as it sees
the second LE SHB after the first BE SHB, even
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #4 from Tomasz Mon ---
Could you please provide some mixed-endian pcapng file that contains some
actual data packets?
--
You are receiving this mail because:
You are watching all bug
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
Tomasz Mon changed:
What|Removed |Added
CC||deso...@gmail.com
--- Comment #3
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #2 from TheDiveO ---
Created attachment 17068
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17068=edit
first SHB is BE, second SHB is LE.
--
You are receiving this mail because:
You are watching all bug
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #1 from TheDiveO ---
Created attachment 17067
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17067=edit
contains a single SHB in BE, no interface block
--
You are receiving this mail because:
You are watching
20 matches
Mail list logo