osmith
/
wireshark
forked from osmocom/wireshark
1
0
Fork 0
Code Pull Requests Releases Wiki Activity

Fix the nanosecond-resolution pcap magic numbers. 

See NSEC_TCPDUMP_MAGIC in

     https://github.com/the-tcpdump-group/libpcap/blob/master/sf-pcap.c

The last octet is 0x4d, not 0xd4.

Change-Id: Ie49a7a9c33e59fe119746bec910522a46b46c2f6
Reviewed-on: https://code.wireshark.org/review/36519
Reviewed-by: Guy Harris <guy@alum.mit.edu>
This commit is contained in:
Guy Harris 2020-03-20 23:33:55 -07:00
parent c4d32e8ddf
commit a955d38f3a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
epan/dissectors/file-pcap.c
View File

@ -68,10 +68,10 @@ dissect_pcap(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_
0xd4, 0xc3, 0xb2, 0xa1
};
static const guint8 pcap_nsec_big_endian_magic[MAGIC_NUMBER_SIZE] = {
0xa1, 0xb2, 0x3c, 0xd4
0xa1, 0xb2, 0x3c, 0x4d
};
static const guint8 pcap_nsec_little_endian_magic[MAGIC_NUMBER_SIZE] = {
0xd4, 0x3c, 0xb2, 0xa1
0x4d, 0x3c, 0xb2, 0xa1
};
volatile gint offset = 0;
proto_tree *main_tree;