Hi I am unable to open rf5 files(K18) using Wireshark. An error reading "rf5 file may be corrupt or damaged" appears. I am using Wireshark 1.6.7. kindly help. Abhinav asked 09 May '12, 03:53  Abhinav |
2 Answers:
According to the Wiki page, Wireshark supports reading rf5 files from K12 and K15 analyzers, but K18 is not mentioned. I'm guessing that the file format has changed; by how much is anyone's guess. If you'd like Wireshark to support the K18 format, you should open an enhancement bug and attach a K18 rf5 file and, if possible, a sample decoding of that file (Tektronix' output). That way if someone has time and the inclination, they could (hopefully) add support for K18 rf5 files. (Of course if you're so inclined a patch against Wireshark's source code would be a sure way to speed up that process.) This question lists some output which I guess is the K18 file--not sure. answered 09 May '12, 09:42  JeffMorriss ♦ |
Try one of the automated builds with a version number of "SVN-53452" or later; somebody finally filed a bug for a failure to read a k18 capture, and attached a capture file that showed the problem, so it was finally possible for some reverse-engineering to be done to handle that file, at least. If that still doesn't handle it, file another bug, and attach the capture file, so that more reverse-engineering can be done. answered 20 Nov '13, 13:26  Guy Harris ♦♦ |
