#53 ssldump fails to read tcpdump file properly

[Anonymous]

I have a tcpdump file created with:

tcpdump -s1500 -iem0 -w wnssl.dump port 443

Once I let it capture some packets and terminate it, the file is not really readable. I use the following to display the capture:

ssldump -nr wnssl.dump

It reads a couple packets (properly) and then prints

ERROR: Length mismatch

tcpdump -nr wnssl.dump displays all the packets.

The tcpdump file is attached.

[Nobody/Anonymous]

tcpdump capture file

[dimrub]

This is probably due to -s 1500 and jumbo packets. Try using -s 0.

[dimrub]

This is probably due to -s 1500 and jumbo packets. Try using -s 0.

[Nobody/Anonymous]

The -s0 was the problem. It works fine now. Thanks.