the capture file appears to be damaged or corrupt(netscreen:too much hex-data)

retag add tags

When ever I try to open the capture getting error message "the capture file appears to be damaged or corrupt(netscreen:too much hex-data)"

Either the file really is an incorrectly formed Juniper NetScreen snoop output file, or it's not a Juniper NetScreen snoop output file but Wireshark is mistakenly concluding that it is, or the Wireshark code to read Juniper NetScreen snoop output files has an error in it.

Please submit a bug on the Wireshark Bugzilla, and attach the capture file, so that we can determine which of those is the case and, if it's a Wireshark bug, attempt to fix it.

19.9k

Guy Harris

answered 2018-05-23 20:43:46 +0000

edit flag offensive 0 remove flag delete link

Comments

Bug 14725 showed that the capture file really was corrupted, as Wireshark detected.

Jaap (2018-05-25 04:41:09 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

the capture file appears to be damaged or corrupt(netscreen:too much hex-data) edit

Comments

1 Answer

Comments