diff options
| author | Guy Harris <guy@alum.mit.edu> | 2015-08-11 19:00:26 -0700 |
|---|---|---|
| committer | Guy Harris <guy@alum.mit.edu> | 2015-08-12 02:01:03 +0000 |
| commit | 260ae6a71e62ab97313767dfd19063dd952923b9 (patch) | |
| tree | c8314a99f764e4ff445529a6622eb899da94eaae /wiretap/capsa.c | |
| parent | 1100ba9ac7a1bbd01c2b1598afa850d1827f376a (diff) | |
| download | wireshark-260ae6a71e62ab97313767dfd19063dd952923b9.tar.gz | |
Clean up the file header description.
Change-Id: I4928f99cdc2b8fc2a3aef648b613ce0b93ed3563
Reviewed-on: https://code.wireshark.org/review/9989
Reviewed-by: Guy Harris <guy@alum.mit.edu>
Diffstat (limited to 'wiretap/capsa.c')
| -rw-r--r-- | wiretap/capsa.c | 13 |
1 files changed, 5 insertions, 8 deletions
diff --git a/wiretap/capsa.c b/wiretap/capsa.c index c0cb8c65cd..f649e36e06 100644 --- a/wiretap/capsa.c +++ b/wiretap/capsa.c @@ -30,18 +30,15 @@ * * a 4-byte magic number, with 'c', 'p', 's', 'e'; * - * a 1-byte or 2-byte "format indicator" (version number?) - if it's - * 1-byte, it's followed by 0x00; + * either a 1-byte "format indicator" (version number?) followed by + * 0x00 or a 2-byte little-endian "format indicator"; * * a 2-byte 0xe8 0x03 (1000 - a data rate? megabits/second?) * - * a 2-byte 0x01 0x00; + * 4 bytes of 0x01 0x00 0x01 0x00; * - * a 2-byte 0x01 0x00; - * - * a 4-byte little-endian file size; - * - * a 4-byte 0x00 0x00 0x00 0x00; + * either a 4-byte little-endian file size followed by 0x00 0x00 0x00 0x00 + * or an 8-byte little-endian file size; * * a 4-byte little-endian packet count (in dns_error_of_udp, it exceeds?) * |