The capture file appears to be damaged or corrupt. (pcap: Files has 109736-byte packet, bigger than maximum of 65535)

[Joseph Laibach <jlaibach () schonfeld com>]

I am having an issue with some of the capture files. Some captures files spit back an error that the capture file 
appears to be damaged or corrupt. The capture is running on a Windows 2003 Sever R2 64bit, with 2 gigs of memory and a 
Inetl Xeon 2.33ghz processor.

I am capturing with dumpcap. The syntax I am using is as follows: C:\"Program Files"\Wireshark\dumpcap.exe -i 
\Device\NPF_{ECC9D35A-826A-4A4F-B634-656EAD4EC7C9} -w d:\SFTI_capture -b files:10000 -a filesize:8192 -B 128 -s 10000000

I added the -s 10000000 to try and fix the large byte packet issue but that hasn't worked.

Anyone have any suggestions on how to eliminated the corruption of capture files?

Thanks

Joe Laibach



This communication is for informational purposes only.  It is not intended as an offer or solicitation or as an 
official confirmation.  Market prices and other information are not guaranteed as to completeness or accuracy and are 
subject to change without notice.  Schonfeld Group reserves the right to monitor and review the content of all messages 
sent to or from this e-mail address.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe