Parsing fails on a capture file where NPF_LOOPBACK adapter is present on the machine where wireshark captured the file
twa890 opened this issue · 0 comments
twa890 commented
I have found that a capture file made by wireshark will not parse if there was an adapter called NPF_LOOPBACK on the machine. I figured out that the header part of the .pcapng file that lists the NICs has a single byte that is causing an exception when packet.net tries to parse it. I have added a file with this problem. I also highlighted the exact byte in a binary editor that is causing the problem. If you set that byte to 0, then it parses fine.
