An error occurred while reading the capture file : Uncompression error :buffer error. => It means that I cannot read data fully?? that is, some data is missing when wireshark reading the capture file, right? What should I do to overcome this error??? I have to read data fully. I am trying to read DARPA 1999 dataset. Please, help me~~!! It's my term project.~~~ please somebody, anybody~ asked 10 Jun '11, 03:14  Pauline Koh |
2 Answers:
The error exists in zlib (compression library), not Wireshark itself. While processing your file, zlib failed with a buffer error (specifically when trying to inflate a particular chunk), which was passed back to the wiretap file handler, which does not have a capability to correct such an error. You should check to see if your file is malformed, corrupted, or too large to handle. Can you verify your data set against the original? answered 10 Jun '11, 06:37  multipleinte... |
Try using gunzip, if you have it, on the capture file. If it fails, the capture file somehow got damaged. answered 10 Jun '11, 12:36  Guy Harris ♦♦ |
