wrong length when export stripped pcap to k12 then load [closed]

  • retag add tags

Wireshark got wrong length displayed if I load a k12 text file that was I exported to k12 from a stripped pcap file (ex: using tcpdump -s <small_len>). Is that a bug? Or would you wanna implement a parameter in editcap or checkbox in Wireshark to fill more |00| to k12 for a stripped capture file?

Just a suggestion. Or is there any other solution to my problem?

PT's avatar
1
PT
asked 2021-12-22 07:20:51 +0000
edit flag offensive 0 remove flag reopen merge delete

Closed for the following reason "duplicate question" by Jaap 2021-12-22 12:11:00 +0000

Comments

add a comment see more comments