Revision history [back]
I have taken a fresh trace file where I transmitted a single packet once per second (this was the lowest it would let me set it to). The trace lasts for ~1min and then I run editcap on the original .pcapng file. I see that I get the same sort of issues as I did previously. Unfortunately I cannot upload the file as I have < 60 points. You can see something is going on around the 17:07:11/13 second mark as an example, the list of the output files is as follows;
c:\Testdata\small_00000_20230321170628.pcapng
c:\Testdata\small_00001_20230321170629.pcapng
c:\Testdata\small_00002_20230321170631.pcapng
c:\Testdata\small_00003_20230321170632.pcapng
c:\Testdata\small_00004_20230321170632.pcapng
c:\Testdata\small_00005_20230321170633.pcapng
c:\Testdata\small_00006_20230321170634.pcapng
c:\Testdata\small_00007_20230321170635.pcapng
c:\Testdata\small_00008_20230321170636.pcapng
c:\Testdata\small_00009_20230321170637.pcapng
c:\Testdata\small_00010_20230321170639.pcapng
c:\Testdata\small_00011_20230321170639.pcapng
c:\Testdata\small_00012_20230321170640.pcapng
c:\Testdata\small_00013_20230321170641.pcapng
c:\Testdata\small_00014_20230321170643.pcapng
c:\Testdata\small_00015_20230321170644.pcapng
c:\Testdata\small_00016_20230321170645.pcapng
c:\Testdata\small_00017_20230321170645.pcapng
c:\Testdata\small_00018_20230321170646.pcapng
c:\Testdata\small_00019_20230321170647.pcapng
c:\Testdata\small_00020_20230321170649.pcapng
c:\Testdata\small_00021_20230321170649.pcapng
c:\Testdata\small_00022_20230321170650.pcapng
c:\Testdata\small_00023_20230321170652.pcapng
c:\Testdata\small_00024_20230321170653.pcapng
c:\Testdata\small_00025_20230321170654.pcapng
c:\Testdata\small_00026_20230321170655.pcapng
c:\Testdata\small_00027_20230321170656.pcapng
c:\Testdata\small_00028_20230321170656.pcapng
c:\Testdata\small_00029_20230321170657.pcapng
c:\Testdata\small_00030_20230321170658.pcapng
c:\Testdata\small_00031_20230321170700.pcapng
c:\Testdata\small_00032_20230321170701.pcapng
c:\Testdata\small_00033_20230321170702.pcapng
c:\Testdata\small_00034_20230321170702.pcapng
c:\Testdata\small_00035_20230321170703.pcapng
c:\Testdata\small_00036_20230321170704.pcapng
c:\Testdata\small_00037_20230321170705.pcapng
c:\Testdata\small_00038_20230321170707.pcapng
c:\Testdata\small_00039_20230321170708.pcapng
c:\Testdata\small_00040_20230321170708.pcapng
c:\Testdata\small_00041_20230321170710.pcapng
c:\Testdata\small_00042_20230321170711.pcapng
c:\Testdata\small_00043_20230321170711.pcapng
c:\Testdata\small_00044_20230321170713.pcapng
c:\Testdata\small_00045_20230321170713.pcapng
c:\Testdata\small_00046_20230321170715.pcapng
c:\Testdata\small_00047_20230321170716.pcapng
c:\Testdata\small_00048_20230321170717.pcapng
c:\Testdata\small_00049_20230321170718.pcapng
c:\Testdata\small_00050_20230321170719.pcapng
c:\Testdata\small_00051_20230321170720.pcapng
c:\Testdata\small_00052_20230321170721.pcapng
c:\Testdata\small_00053_20230321170721.pcapng
c:\Testdata\small_00054_20230321170723.pcapng
c:\Testdata\small_00055_20230321170724.pcapng
c:\Testdata\small_00056_20230321170725.pcapng
c:\Testdata\small_00057_20230321170725.pcapng
c:\Testdata\small_00058_20230321170727.pcapng
The output was as follows -
Wireshark 3.6.3 (v3.6.3-0-g6d348e4611e2)
Copyright 1998-2022 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) using Microsoft Visual Studio 2019 (VC++ 14.29, build 30139),
with Qt 5.15.2, with libpcap, with GLib 2.66.4, with zlib 1.2.11, with Lua
5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT
Kerberos, with MaxMind DB resolver, with nghttp2 1.44.0, with brotli, with LZ4,
with Zstandard, with Snappy, with libxml2 2.9.10, with libsmi 0.4.8, with
QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with
SpeexDSP (using bundled resampler), with Minizip.
Running on 64-bit Windows 10 (21H2), build 19044, with Intel(R) Core(TM)
i9-9980HK CPU @ 2.40GHz (with SSE4.2), with 130823 MB of physical memory, with
GLib 2.66.4, with Qt 5.15.2, with Npcap version 1.55, based on libpcap version
1.10.2-PRE-GIT, with c-ares 1.17.0, with GnuTLS 3.6.3, with Gcrypt 1.8.3, with
nghttp2 1.44.0, with brotli 1.0.9, with LZ4 1.9.3, with Zstandard 1.4.0, without
AirPcap, with LC_TYPE=English_United Kingdom.utf8, binary plugins supported (0
loaded).
I have taken a fresh trace file where I transmitted a single packet once per second (this was the lowest it would let me set it to). The trace lasts for ~1min and then I run editcap on the original .pcapng file. I see that I get the same sort of issues as I did previously. Unfortunately I cannot upload the file as I have < 60 points. You can see something is going on around the 17:07:11/13 second mark as an example, the list of the output files is as follows;
c:\Testdata\small_00000_20230321170628.pcapng
c:\Testdata\small_00001_20230321170629.pcapng
c:\Testdata\small_00002_20230321170631.pcapng
c:\Testdata\small_00003_20230321170632.pcapng
c:\Testdata\small_00004_20230321170632.pcapng
c:\Testdata\small_00005_20230321170633.pcapng
c:\Testdata\small_00006_20230321170634.pcapng
c:\Testdata\small_00007_20230321170635.pcapng
c:\Testdata\small_00008_20230321170636.pcapng
c:\Testdata\small_00009_20230321170637.pcapng
c:\Testdata\small_00010_20230321170639.pcapng
c:\Testdata\small_00011_20230321170639.pcapng
c:\Testdata\small_00012_20230321170640.pcapng
c:\Testdata\small_00013_20230321170641.pcapng
c:\Testdata\small_00014_20230321170643.pcapng
c:\Testdata\small_00015_20230321170644.pcapng
c:\Testdata\small_00016_20230321170645.pcapng
c:\Testdata\small_00017_20230321170645.pcapng
c:\Testdata\small_00018_20230321170646.pcapng
c:\Testdata\small_00019_20230321170647.pcapng
c:\Testdata\small_00020_20230321170649.pcapng
c:\Testdata\small_00021_20230321170649.pcapng
c:\Testdata\small_00022_20230321170650.pcapng
c:\Testdata\small_00023_20230321170652.pcapng
c:\Testdata\small_00024_20230321170653.pcapng
c:\Testdata\small_00025_20230321170654.pcapng
c:\Testdata\small_00026_20230321170655.pcapng
c:\Testdata\small_00027_20230321170656.pcapng
c:\Testdata\small_00028_20230321170656.pcapng
c:\Testdata\small_00029_20230321170657.pcapng
c:\Testdata\small_00030_20230321170658.pcapng
c:\Testdata\small_00031_20230321170700.pcapng
c:\Testdata\small_00032_20230321170701.pcapng
c:\Testdata\small_00033_20230321170702.pcapng
c:\Testdata\small_00034_20230321170702.pcapng
c:\Testdata\small_00035_20230321170703.pcapng
c:\Testdata\small_00036_20230321170704.pcapng
c:\Testdata\small_00037_20230321170705.pcapng
c:\Testdata\small_00038_20230321170707.pcapng
c:\Testdata\small_00039_20230321170708.pcapng
c:\Testdata\small_00040_20230321170708.pcapng
c:\Testdata\small_00041_20230321170710.pcapng
c:\Testdata\small_00042_20230321170711.pcapng
c:\Testdata\small_00043_20230321170711.pcapng
c:\Testdata\small_00044_20230321170713.pcapng
c:\Testdata\small_00045_20230321170713.pcapng
c:\Testdata\small_00046_20230321170715.pcapng
c:\Testdata\small_00047_20230321170716.pcapng
c:\Testdata\small_00048_20230321170717.pcapng
c:\Testdata\small_00049_20230321170718.pcapng
c:\Testdata\small_00050_20230321170719.pcapng
c:\Testdata\small_00051_20230321170720.pcapng
c:\Testdata\small_00052_20230321170721.pcapng
c:\Testdata\small_00053_20230321170721.pcapng
c:\Testdata\small_00054_20230321170723.pcapng
c:\Testdata\small_00055_20230321170724.pcapng
c:\Testdata\small_00056_20230321170725.pcapng
c:\Testdata\small_00057_20230321170725.pcapng
c:\Testdata\small_00058_20230321170727.pcapng
The output was as follows -
I have taken a fresh trace file where I transmitted a single packet once per second (this was the lowest it would let me set it to). The trace lasts for ~1min and then I run editcap on the original .pcapng file. I see that I get the same sort of issues as I did previously. Unfortunately I cannot upload the file as I have < 60 points. You can see something is going on around the 17:07:11/13 second mark as an example, the list of the output files is as follows;