I found that cutting parts of the dump produced files which wireshark loaded just fine. Used this to locate a single frame causing a crash:
tshark -R 'frame.number eq 22308' -r ~/docs/hardware/sierra/mc7710/mc7710-firmware-upgrade-usbmon.dump -w /tmp/new.dump bjorn@nemi:~$ wireshark -r /tmp/new.dump *** glibc detected *** wireshark: munmap_chunk(): invalid pointer: 0x00007f62d2240b50 *** Segmentation fault tshark does not seem to have problems displying this frame: bjorn@nemi:~$ tshark -Vx -r /tmp/new.dump Frame 1: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 115 Arrival Time: May 22, 2012 17:40:39.353960000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1337701239.353960000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 77 bytes (616 bits) Capture Length: 77 bytes (616 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: usb:ppp:crtp] USB URB URB id: 0xffff8801fc40a600 URB type: URB_SUBMIT ('S') URB transfer type: URB_BULK (0x03) Endpoint: 0x01, Direction: OUT 0... .... = Direction: OUT (0) .000 0001 = Endpoint value: 1 Device: 21 URB bus id: 2 Device setup request: not relevant ('-') Data: present (0) URB sec: 1337701239 URB usec: 353960 URB status: Operation now in progress (-EINPROGRESS) (-115) URB length [bytes]: 13 Data length [bytes]: 13 [bInterfaceClass: Unknown (0xffff)] Point-to-Point Protocol Protocol: RTP IPHC Full Header (0x0061) RTP IPHC Full Header 01.. .... = Flags: 8-bit Context Id (0x01) ..00 1001 = Generation: 9 IP version is 13: the only supported version is 4 0000 00 a6 40 fc 01 88 ff ff 53 03 01 15 02 00 2d 00 ..@.....S.....-. 0010 77 b3 bb 4f 00 00 00 00 a8 66 05 00 8d ff ff ff w..O.....f...... 0020 0d 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00 ................ 0030 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 0040 7e 61 d5 9f 49 98 c1 00 5a 00 40 00 75 ~a..I...Z.@.u bjorn@nemi:~$ ls -l /tmp/new.dump -rw-r--r-- 1 bjorn bjorn 192 Jul 3 11:02 /tmp/new.dump bjorn@nemi:~$ file /tmp/new.dump /tmp/new.dump: pcap-ng capture file - version 1.0 bjorn@nemi:~$ hexdump -C /tmp/new.dump 00000000 0a 0d 0d 0a 30 00 00 00 4d 3c 2b 1a 01 00 00 00 |....0...M<+.....| 00000010 ff ff ff ff ff ff ff ff 04 00 0c 00 54 53 68 61 |............TSha| 00000020 72 6b 20 31 2e 38 2e 30 00 00 00 00 30 00 00 00 |rk 1.8.0....0...| 00000030 01 00 00 00 20 00 00 00 dc 00 00 00 ff ff 00 00 |.... ...........| 00000040 09 00 01 00 06 00 00 00 00 00 00 00 20 00 00 00 |............ ...| 00000050 06 00 00 00 70 00 00 00 00 00 00 00 a1 c0 04 00 |....p...........| 00000060 68 f2 2f d7 4d 00 00 00 4d 00 00 00 00 a6 40 fc |h./.M...M.....@.| 00000070 01 88 ff ff 53 03 01 15 02 00 2d 00 77 b3 bb 4f |....S.....-.w..O| 00000080 00 00 00 00 a8 66 05 00 8d ff ff ff 0d 00 00 00 |.....f..........| 00000090 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 000000a0 00 00 00 00 40 00 00 00 00 00 00 00 7e 61 d5 9f |....@.......~a..| 000000b0 49 98 c1 00 5a 00 40 00 75 00 00 00 70 00 00 00 |I...Z.@.u...p...| 000000c0 Hope this helps reproducing the bug. Bjørn
new.dump
Description: Binary data