This is our old Q&A Site. Please post any new questions and answers at


Wireshark Version: 1.12.4, RHEL 6.0

I have PCAP file with only one Frame of 683922 bytes, is there any size constraint to be lessthan or equal to 262144

Request your help

Please find the below screenshot for the error message alt text

Thanks Dinesh

asked 02 Sep '15, 01:17

Dinesh%20Babu%20Sadu's gravatar image

Dinesh Babu ...
accept rate: 0%

edited 02 Sep '15, 02:25

As the error message says, your file is corrupt. One way this happens is if you transfer the file from one system to another using FTP. Most FTP clients default to ASCII mode, but Wireshark trace files need to be transferred in Binary mode, not ASCII mode. If that's what happened here, and you still have the original file, then just repeat the transfer but this time put your FTP client in binary mode. For a command-line FTP client, the command "Type I" will do it.

permanent link

answered 02 Sep '15, 10:24

Jim%20Aragon's gravatar image

Jim Aragon
accept rate: 24%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 02 Sep '15, 01:17

question was seen: 1,358 times

last updated: 02 Sep '15, 10:24

p​o​w​e​r​e​d by O​S​Q​A