Wireshark got wrong length displayed if I load a k12 text file that was I exported to k12 from a stripped pcap file (ex: using tcpdump -s <small_len>). Is that a bug? Or would you wanna implement a parameter in editcap or checkbox in Wireshark to fill more |00| to k12 for a stripped capture file?
Just a suggestion. Or is there any other solution to my problem?
