Wireshark mailing list archives

Re: "File has packet larger than file's snapshot length." warnings


From: Guy Harris <guy () alum mit edu>
Date: Mon, 15 Jul 2013 10:51:46 -0700


On Jul 14, 2013, at 5:26 PM, "Turney, Cal" <cal.turney () emc com> wrote:

Are you saying that rather than adding an option to ignore snapshot_length/packet size discrepancies it might be 
best to not generate these warnings?

Yes.  I.e., it might be best to just hardwire in the "ignore those discrepancies" option.

OK.  I'll submit a patch that adds the option "Do NOT issue a warning if the packet size exceeds the snapshot length 
in the capture header." in Preferences>Protocols>Frame and set the default to not issue a warning (checkmark set).  
If unchecked, the warning will be "pcap: <n>-byte packet exceeds snapshot length of <n>." rather than "pcap: File has 
packet larger than file's snapshot length."    

So, again, why bother offering the option to issue the warning at all?  Why not just remove it - i.e., hardwire in the 
"do NOT issue a warning..." option?
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: