forwarded 681478 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7381
retitle 681478 wireshark-common: mergecap generates unusable pcapng
file if interface index 0 has no packets
thanks

Hi Phil,

The problem occurs only when mergecap creates pcapng files.
The following works fine for me:
$ mergecap -F libpcap -w bug-ws-7382.pcap en0-arp-en1-arp.pcapng en1-arp.pcapng
$ tshark -r bug-ws-7382.pcap
  1   0.000000 192.168.0.16 -> Broadcast    ARP Who has 192.168.0.98?
Tell 192.168.0.16
  2 142.713927 192.168.0.16 -> Broadcast    ARP Who has 192.168.0.98?
Tell 192.168.0.16

Since mergecap never was able to perform the merge of pcapng files to
one pcapng file I don't consider the reported problem to be a
regression thus reverting wireshark package to 1.6.x is not needed.

Upstream is working on the fix and with the support of Release
Managers I may be able to upload a fixed version for Wheezy.

Cheers,
Balint

2012/7/13 Philipp Marek <philipp.ma...@linbit.com>:
> Package: wireshark-common
> Version: 1.8.0-1
> Tags: upstream
>
> mergecap: Error reading <file>: The file appears to be damaged or corrupt.
> (pcapng: interface index 1024 is not less than interface count 1.)
>
>
> Upstream report:
>         https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7381
>
> Perhaps the previous version package should be made available again, until
> this is fixed in upstream.
>
>
> Regards,
>
> Phil
>
>
>
>


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to