.cap File Opens But Blank

asked 2018-02-07 16:57:32 +0000

wapatter gravatar image

Hi all, I'm trying to open a 1693KB .cap file that was not gathered on my system. When I open the file, Wireshark starts normally, no error messages. However, all of the data windows are blank. I've upgraded to the most current version of Wireshark, rebooted, attempted to rename the file extension to .pcap, .pcapng. I've also opened it up with Notepad++ and I see that there's data.

Thanks in advance for any help or advice!

edit retag flag offensive close merge delete

Comments

.cap file

There are a number of file formats that use the extension .cap; what program captured this file?

attempted to rename the file extension to .pcap, .pcapng

Wireshark identifies pcap and pcapng files by the contents at the beginning of the file, not by the extension.

If you select "Capture File Properties" from the "Statistics" menu, what does the dialog it pops up say the "Format" is?

Guy Harris gravatar imageGuy Harris ( 2018-02-07 19:02:12 +0000 )edit

Use the capinfos command line tool to get some basic properties of the capture file.

Jaap gravatar imageJaap ( 2018-02-07 19:25:31 +0000 )edit
add a comment