Re: "File has packet larger than file's snapshot length." warnings

[Guy Harris <guy () alum mit edu>]

On Jul 13, 2013, at 12:45 PM, "Turney, Cal" <cal.turney () emc com> wrote:

> On Jul 10, 2013, at 10:09 AM, "Turney, Cal" <cal.turney () emc com> wrote:

        ...

> It is on Ethernet jumbo-capable Intel, Broadcom, and some others.  It looks like the original tcpdump developer 
> hard-coded 1516 when he probably meant 1514.

So jumbo frames appear to be larger than the snapshot length?

> Are you saying that rather than adding an option to ignore snapshot_length/packet size discrepancies it might be best 
> to not generate these warnings?

Yes.  I.e., it might be best to just hardwire in the "ignore those discrepancies" option.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe