I am running Wireshark 1.6.4 (64 Bit) on Windows 7. When I tried to open files, it failed with following errors. "The capture file appears to be damaged or corrupt. (pcap: File has 771751936 byte packet, bigger than maximum of 65535)". The same file can be opened fine on wireshark on MacOS so I am assuming file is fine it is just some kind of bug is causing problem on Windows 7. Does anyone experience this problem? Any insight? asked 03 Jan '12, 14:56  ABC |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
64 or 32 bit MacOS?
The standard first question: :)
How was the file copied ? IOW: was the copy a binary copy ?
In particular, was it captured on Mac OS X, or some other UN*X, and then copied over to the Windows machine? If the copy was done in a fashion that tries to compensate for the difference between the UN*X text file format (lines with LF at the end of the line) and the DOS/Windows text file format (lines with CR-LF at the end of the line), that would damage the capture file (pcap files are binary files, not text files) and make it not readable.