Revision history [back]
wrong length when export stripped pcap to k12 then load
Wireshark got wrong length displayed if I load a k12 text file that was I exported to k12 from a stripped pcap file (ex: using tcpdump -s ). Is that a bug? Or would you wanna implement a parameter in editcap or checkbox in Wireshark to fill more |00| to k12 for a stripped capture file?
Just a suggestion. Or is there any other solution to my problem?