Hi,
Currently, the default capture length for pcap files by tcpdump (and tshark) is 262144.
For such valid pcap files, pcapfix gives the message:
[-] The global pcap header seems to be corrupt! ==> CORRECTED
and correct the capture length to 65535.
Could you change this behaviour ?
Hi, Currently, the default capture length for pcap files by tcpdump (and tshark) is
262144
. For such valid pcap files, pcapfix gives the message: [-] The global pcap header seems to be corrupt! ==> CORRECTED and correct the capture length to65535
. Could you change this behaviour ?