Page 1 of 1

corrupt sniffer files from rb433+routeros 3.28

Posted: Sat Aug 15, 2009 8:57 pm
by ctech4285
I created a package file with the routeros, downloaded it via ftp and imported it to wireshark. i get wired error corrupt file errors. i tryed a few other programs and get the same result.

the changelog for 3.0beta7 states that: fixed wireless sniffer file format;

i have an rb433 with the newest routeros version installed (i think)

[admin@MikroTik] /system package> print
Flags: X - disabled
# NAME VERSION SCHEDULED
0 X routing-test 3.28
1 dhcp 3.28
2 X ipv6 3.28
3 system 3.28
4 advanced-tools 3.28
5 routing 3.28
6 hotspot 3.28
7 security 3.28
8 routerboard 3.28
9 wireless 3.28
10 routeros-mipsbe 3.28
11 ppp 3.28

kind regards
snezan

Re: corrupt sniffer files from rb433+routeros 3.28

Posted: Mon Aug 17, 2009 2:11 pm
by sergejs
Please, paste the exact command, which was used to create sniffer file.
Do you have the latest wireshark version ?

Re: corrupt sniffer files from rb433+routeros 3.28

Posted: Mon Aug 17, 2009 8:53 pm
by ctech4285
sure thing
i got the latest wireshark version

the error i get when opening the sniffer file is:
The capture file appears to be damaged or corrupt.
(pcap: File has 3405774848-byte packet, bigger then the maximum of 65535)

the file size is only 88KB
here are the sniffer settings i used

[admin@MikroTik] /interface wireless sniffer> print
multiple-channels: no
channel-time: 200ms
only-headers: no
receive-errors: no
memory-limit: 100
file-name: "test04"
file-limit: 10000
streaming-enabled: no
streaming-server: 192.168.30.127
streaming-max-rate: 0
[admin@MikroTik] /interface wireless sniffer> sniff
interface: wlan2
processed-packets: 720
file-size: 88869
file-saved-packets: 720
file-over-limit-packets: 0
memory-size: 100365
memory-saved-packets: 720
memory-over-limit-packets: 0
real-file-limit: 10000
real-memory-limit: 100

end then i used 'q' for quit

i attached the sniffer file, (it doesnt contain any private information)
test4.txt is the original file strait from the routerboard, i just added .txt so i could upload it

thank you for your help

Re: corrupt sniffer files from rb433+routeros 3.28

Posted: Fri Aug 21, 2009 4:24 am
by ctech4285
ok i upgraded
[admin@MikroTik] /system package> print
Flags: X - disabled
# NAME VERSION SCHEDULED
0 system 4.0beta4
1 dhcp 4.0beta4
2 user-manager 4.0beta4
3 multicast 4.0beta4
4 ipv6 4.0beta4
5 security 4.0beta4
6 routing 4.0beta4
7 hotspot 4.0beta4
8 mpls 4.0beta4
9 routerboard 4.0beta4
10 advanced-tools 4.0beta4
11 wireless 4.0beta4


same problem with corrupt sniffer files??!! bug?
how do i report bugs?

Re: corrupt sniffer files from rb433+routeros 3.28

Posted: Mon Aug 24, 2009 4:13 pm
by sergejs
Just tried the same settings on my RouterBOARD,
/system routerboard> print 
       routerboard: yes
             model: "433AH"
     serial-number: "198501F09225"
  current-firmware: "2.21"
  upgrade-firmware: "2.20"
[admin@MikroTik] /system routerboard> /interface wireless sniffer print 
   multiple-channels: no
        channel-time: 200ms
        only-headers: no
      receive-errors: no
        memory-limit: 10
           file-name: "SSSNIFFF"
          file-limit: 10
   streaming-enabled: no
    streaming-server: 0.0.0.0
  streaming-max-rate: 0
My file is opening correctly. Please contact support (support@mikrotik.com) with the attached support output file from the router.

Re: corrupt sniffer files from rb433+routeros 3.28

Posted: Tue Aug 25, 2009 12:07 am
by ctech4285
the file was getting corrupted during transfer, i transferred the file with winbox and had no problems at al, thank you.