Package: tshark Version: 0.99.5-1 Severity: normal Hello,
ulogd outputs packet to a pcap file. I think this file is kind of truncated because ulogd keeps updating it. Although the attached file was copied while network was down. tcpdump loads it fine. But tshark/wireshark don't. tshark -nr pcap.log tshark: "pcap.log" appears to be damaged or corrupt. (pcap: File has 3145728-byte packet, bigger than maximum of 65535) Maybe the file is really corrupted or inconsistent, but tcpdump is able to decode it without errors. Please fix. Thanks. -- System Information: Debian Release: sid APT prefers unstable APT policy: (500, 'unstable') Architecture: powerpc (ppc) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.20.4-ben Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to fr_FR.UTF-8) Versions of packages tshark depends on: ii libadns1 1.4-0.1 Asynchronous-capable DNS client li ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries ii libcap1 1:1.10-14 support for getting/setting POSIX. ii libgcrypt11 1.2.3-2 LGPL Crypto library - runtime libr ii libglib2.0-0 2.12.6-2 The GLib library of C routines ii libgnutls13 1.4.4-3 the GNU TLS library - runtime libr ii libgpg-error0 1.4-2 library for common error values an ii libpcap0.8 0.9.5-1 System interface for user-level pa ii libpcre3 6.7-1 Perl 5 Compatible Regular Expressi ii wireshark-common 0.99.5-1 network traffic analyser (common f ii zlib1g 1:1.2.3-13 compression library - runtime tshark recommends no packages. -- debconf-show failed
pcap.log.bz2
Description: BZip2 compressed data
