On Mar 21, 2010, at 9:14 PM, Brian Oleksa wrote:
> But I was able to run the pcap file and stop the loading process before
> it crashed and one thing that I noticed
> was in the info column it said "Packet Size limited during capture".
In the detail view for the packet that has "Packet Size limited during
capture", the topmost line ("Frame {N}") should say "{N} bytes on wire, {M}
bytes captured" (it might also give some numbers of bits). Is {N} greater than
{M}? If so, that's the problem - the packets were captured with a snapshot
length specified, so that at most the first {M} bytes of the packet were saved
to the file.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <[email protected]>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:[email protected]?subject=unsubscribe
