This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

“Packet Cut Short” appears randomly on one installation only

0

I have two machines set up. Reading an identical saved .pcap file, one machine's wireshark installation comes up with an error: "The capture file appears to have been cut short in the middle of a packet." The other machine displays the results precisely as expected. What could cause this difference? They are both running windows 7 64-bit with wireshark 1.12.1 installed.

asked 28 Oct '14, 07:46

11bkrain's gravatar image

11bkrain
1111
accept rate: 0%

How did you transfer the PCAP file from one to the other? FTP maybe?

(28 Oct '14, 07:59) Jaap ♦

Yeah, I'm using WinSCP to FTP the .pcap file

(28 Oct '14, 08:09) 11bkrain

from a third party server

(28 Oct '14, 08:15) 11bkrain

One Answer:

1

Make sure you transfer it as a binary file.

answered 28 Oct '14, 08:19

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

that worked, awesome! Thanks

(28 Oct '14, 08:45) 11bkrain

@11bkrain: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up-vote the answer (thumb up).

(28 Oct '14, 08:52) Kurt Knochner ♦