.cap File Opens But Blank
Hi all, I'm trying to open a 1693KB .cap file that was not gathered on my system. When I open the file, Wireshark starts normally, no error messages. However, all of the data windows are blank. I've upgraded to the most current version of Wireshark, rebooted, attempted to rename the file extension to .pcap, .pcapng. I've also opened it up with Notepad++ and I see that there's data.
Thanks in advance for any help or advice!
Comments
There are a number of file formats that use the extension
.cap; what program captured this file?Wireshark identifies pcap and pcapng files by the contents at the beginning of the file, not by the extension.
If you select "Capture File Properties" from the "Statistics" menu, what does the dialog it pops up say the "Format" is?
Use the capinfos command line tool to get some basic properties of the capture file.