This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I have two machines set up. Reading an identical saved .pcap file, one machine's wireshark installation comes up with an error: "The capture file appears to have been cut short in the middle of a packet." The other machine displays the results precisely as expected. What could cause this difference? They are both running windows 7 64-bit with wireshark 1.12.1 installed.

asked 28 Oct '14, 07:46

11bkrain's gravatar image

11bkrain
1111
accept rate: 0%

How did you transfer the PCAP file from one to the other? FTP maybe?

(28 Oct '14, 07:59) Jaap ♦

Yeah, I'm using WinSCP to FTP the .pcap file

(28 Oct '14, 08:09) 11bkrain

from a third party server

(28 Oct '14, 08:15) 11bkrain

Make sure you transfer it as a binary file.

permanent link

answered 28 Oct '14, 08:19

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

that worked, awesome! Thanks

(28 Oct '14, 08:45) 11bkrain

@11bkrain: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up-vote the answer (thumb up).

(28 Oct '14, 08:52) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×52

question asked: 28 Oct '14, 07:46

question was seen: 2,581 times

last updated: 28 Oct '14, 08:52

p​o​w​e​r​e​d by O​S​Q​A