This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Conversion : Invalid data length 2110274 (runs past the end of the record)

0

Hello everybody,

1st I speak French, so please excuse my mistakes. I'm trying to convert a txt capture in a pcap format, but I see this error:

The capture file appears to be damaged or corrupt.
(vwr: Invalid data length 2110274 (runs past the end of the record))

It has taken me 2 days to try to solve that. Please, can someone help me? Thank you in advance.

This question is marked "community wiki".

asked 28 Aug '14, 02:32

Schadrac%20Akroman's gravatar image

Schadrac Akr...
1●1●1●1
accept rate: 0%

edited 28 Aug '14, 08:29

cmaynard's gravatar image

cmaynard ♦♦
9.4k●10●38●142

To be sure I (we?) understand the question, you're trying to convert a text file of a format similar to the following to a binary .pcap file format, is that correct?

000000 00 e0 1e a7 05 6f 00 10 ........
000008 5a a0 b9 12 08 00 46 00 ........
000010 03 68 00 00 00 00 0a 2e ........
000018 ee 33 0f 19 08 7f 0f 19 ........
000020 03 80 94 04 00 00 10 01 ........
000028 16 a2 0a 00 03 50 00 0c ........
000030 01 01 0f 19 03 80 11 01 ........

The above sample was taken from the text2pcap.html man page.

Is that what you're trying to use, text2pcap, to do the conversion? If so, which version of text2pcap are you using; if not, which tool are you using?

Maybe you could provide a sample of the data you're trying to convert?

(28 Aug '14, 08:27) cmaynard ♦♦