Revision history [back]
how to export a stripped capture file to k12 ?
Wireshark got wrong packet length displayed if I open a k12 text file that was I exported to k12 from a stripped pcap file (ex: using tcpdump -s ).
Is that a bug? Or would you wanna implement a parameter in editcap or checkbox in Wireshark to fill more |00| to k12 for a stripped capture file?
Just a suggestion. Or is there any other solution to my problem?