![]() Test007.ntar (SHB, IDB, 1 * SPB) - there are two problems with this file: (1) the SPB Block Length is 139, which is not a multiple of 4, and (2) the SPB Packet Data contains more than the SHB's snaplen length allows (SHB's snaplen is 96, but the SPB contains 123 bytes of data). same as http.littleendian but buggy! mixture of big and little endian byte swapping, beginning with a bad SHB major version value Wireshark refuses to load this file since it contains multiple SHB's, which is not yet supported. ![]()
0 Comments
Leave a Reply. |