https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16531
--- Comment #1 from David Perry <boolean...@gmail.com> ---
Created attachment 17740
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17740&action=edit
Fabricated PcapNG file with two SHBs, and different snap lengths
Here is a second example capture file. It's very similar to the first, but the
two IDBs claim snap lengths of 45 and 44 bytes respectively (ie, the length of
the packet data I generated for each). The SPBs still contain 45 or 44 bytes of
data but now they have their Original Packet Length field set to 50 (originally
to be a test case for Bug #16526).
When I load that file as a pcapng, Wireshark gives an error dialog that "The
capture file appears to be damaged or corrupt.
(pcapng_read_simple_packet_block: total block length 60 of PB is too small for
50 bytes of packet data)".
This may be a different bug, but until that can be confirmed I think it's
better to note here.
--
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
