Andreas Fink wrote: > I'm capturing data on a linux machine (fedora5) with tcpdump -s0 > -wdumpfile.cap. Transfer the file to the mac and try to open it with > wireshark. I get weird errors saying it couldnt open it because packet > size is bigger than 65k or something like that. Same is if I capture > with ethereal on that linux box and transfer the file to the mac.
What happens if you try to read those files with tcpdump on the Mac? > Is this a endian problem maybe? Not if the Linux machine is an x86-based PC, because an x86-based Mac and an x86-based PC are both little-endian. (The Wireshark binary is either x86-only, or universal with an x86 binary included, right?) _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
