search

microsoft / etl2pcapng

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.
MIT License
607 stars 114 forks source link

Wrong enhanced packet size when it has a comment #32

Closed mxmauro closed 3 years ago

mxmauro commented 3 years ago

Hi, based on what I see in PcapNgWriteEnhancedPacket function, sizeof(EndOption) is added twice if a comment is provided.

Regards.

csujedihy commented 3 years ago

https://github.com/microsoft/etl2pcapng/pull/34

We just found this bug today and it will get fixed in this PR.