LEGO wrote: > I just tried to open some files with my intel > based minimac and they do not work...
Where were the capture files created, and what application wrote them? > oddly enough capture works only > if you are seeing packets in real-time, if instead you try to capture > without it fails to open them. What does "wireshark -v" print? And is Wireshark built from source? > The issue here is that it doesn't appear to be an endianess issue, No, it's almost certainly not an endianness issue; as Jeff noted, libpcap and wiretap both determine the endianness of a libpcap file from the magic number (which is written in *host* byte order, as are other values in the file header and packet record header), and use that when reading other values from the file and packet record headers. _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
