https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15707
--- Comment #10 from Guy Harris <g...@alum.mit.edu> ---
(In reply to Tomasz Mon from comment #4)
> Could you please provide some mixed-endian pcapng file that contains some
> actual data packets?
...because that probably won't work. The current code does *not* have support
for multiple sections, even if they have the *same* endianness; it has only one
per-file private data structure, not a set of per-segment structures attached
to the per-file data structure, which is what would be needed to support
multiple sections. It probably will report a corrupt file if you have multiple
sections, with different byte orders, with packets in both sections; it will
probably get even *more* badly confused if the two sections don't have the same
lists of interfaces (if, for example, the first section has an "eth0"
interface, with link type LINKTYPE_ETHERNET, and the second section has a
"wlan0" interface, with link type LINKTYPE_IEEE802_11_RADIOTAP).
--
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
