Re: [Wireshark-dev] pcapng decoding error when preamble is shortened

2021-02-13 Thread Timmy Brolin
Yes, the capture device is indeed capturing data completely accurately. You are referring to the transmission section of IEEE 802.3br-2016. If you look at the receive section on page 51, you will find that receivers are required to accept any length preamble. Hence, Wireshark is not compliant

Re: [Wireshark-dev] pcapng decoding error when preamble is shortened

2021-02-13 Thread Jaap Keuter
Hi,The capture file (View | Reload as File Format/Capture) contains an Interface Descriptor Block which states Link Type 274.According to https://www.tcpdump.org/linktypes.html the Packet Data in the capture file must adhere to "mPackets, as specified by IEEE 802.3br Figure 99-4, starting with the