#21 closed enhancement (fixed)
tracemerge cannot write erf files when using -i from pcap input
| Reported by: | matt@… | Owned by: | perry |
|---|---|---|---|
| Priority: | critical | Milestone: | |
| Component: | documentation | Version: | |
| Keywords: | Cc: |
Description
When using the -i option in conjunction with a PCAP input trace and ERF output traces an error occurs as shown below.
matt@argon:~$ tracemerge -i erf:new.erf pcap:out.pcap pcap:in.pcap trace_write_packet((null)): No erf type for packet
The problem occurs because when trace_set_direction is set on a packet read from a pcap trace the packet is promoted to the LINUX_SLL type. This type is not handled by the erf output routines, libtrace_to_erf_type in linktypes.c particularly, leading to the error shown above.
Change History (4)
comment:1 Changed 15 years ago by perry
- Resolution set to fixed
- Status changed from new to closed
comment:2 Changed 15 years ago by anonymous
- Component changed from tools to documentation
- Priority changed from major to critical
- Type changed from defect to task
- Version changed from 3.0 to 1.0
comment:3 Changed 15 years ago by anonymous
- Component changed from documentation to tests
- Priority changed from critical to minor
- Type changed from task to defect
- Version changed from 1.0 to 3.0
comment:4 Changed 15 years ago by anonymous
- Component changed from tests to documentation
- Priority changed from minor to critical
- Type changed from defect to enhancement
- Version 3.0 deleted
Note: See
TracTickets for help on using
tickets.
Libtrace didn't support demoting packets from LINUX_SLL to Ethernet when writing erf packets. Now fixed.