 | 1 | initial version |
The decode of the first packet says "Encapsulation type: Network Monitor Filter (189)", "Version: 1", App Major Version: 196612" and "App Minor Version: 154009600"
That "packet" is file metadata, not a packet, and there's no way to represent that metadata in a pcapng file.
The best way to do that conversion is with
editcap -F pcapng {input file} {output file} 1
which means that editcap will discard the first packet before trying to write it to the pcapng file.
Wireshark should be fixed to handle that better, but that'd require some restructuring.