wrong length when export stripped pcap to k12 then load [closed]

asked 2021-12-22 07:20:51 +0000

PT gravatar image

Wireshark got wrong length displayed if I load a k12 text file that was I exported to k12 from a stripped pcap file (ex: using tcpdump -s <small_len>). Is that a bug? Or would you wanna implement a parameter in editcap or checkbox in Wireshark to fill more |00| to k12 for a stripped capture file?

Just a suggestion. Or is there any other solution to my problem?

edit retag flag offensive reopen merge delete

Closed for the following reason duplicate question by Jaap
close date 2021-12-22 12:11:00.579532

add a comment