diff options
| author | Guy Harris <guy@alum.mit.edu> | 2020-03-20 23:33:55 -0700 |
|---|---|---|
| committer | Guy Harris <guy@alum.mit.edu> | 2020-03-21 06:34:34 +0000 |
| commit | a955d38f3a9f8c9952897a5319abc8f8924d15b7 (patch) | |
| tree | 3e5614dd8f5c87b8c03674eb992658235a45f6d5 | |
| parent | c4d32e8ddf6608891145b1605a9eaa40f2467a8d (diff) | |
Fix the nanosecond-resolution pcap magic numbers.
See NSEC_TCPDUMP_MAGIC in
https://github.com/the-tcpdump-group/libpcap/blob/master/sf-pcap.c
The last octet is 0x4d, not 0xd4.
Change-Id: Ie49a7a9c33e59fe119746bec910522a46b46c2f6
Reviewed-on: https://code.wireshark.org/review/36519
Reviewed-by: Guy Harris <guy@alum.mit.edu>
| -rw-r--r-- | epan/dissectors/file-pcap.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/epan/dissectors/file-pcap.c b/epan/dissectors/file-pcap.c index 1e8b1bdbf9..c0e5a704ae 100644 --- a/epan/dissectors/file-pcap.c +++ b/epan/dissectors/file-pcap.c @@ -68,10 +68,10 @@ dissect_pcap(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_ 0xd4, 0xc3, 0xb2, 0xa1 }; static const guint8 pcap_nsec_big_endian_magic[MAGIC_NUMBER_SIZE] = { - 0xa1, 0xb2, 0x3c, 0xd4 + 0xa1, 0xb2, 0x3c, 0x4d }; static const guint8 pcap_nsec_little_endian_magic[MAGIC_NUMBER_SIZE] = { - 0xd4, 0x3c, 0xb2, 0xa1 + 0x4d, 0x3c, 0xb2, 0xa1 }; volatile gint offset = 0; proto_tree *main_tree; |