pcap: File has 186435570-byte packet, bigger than maximum of 65535

 

在linux上使用airmon-ng抓802.11包定位问题，通过tftp将获得的包发送到xp上解析时，提示如下错误。

pcap: File has 186435570-byte packet, bigger than maximum of 65535

 

解决方法：将抓的包通过tftp传到xp上时需要使用binary格式。

 

参考信息：

 

Did you open the file on the host on which it was captured? Or did you transfer the file from the capturing host to the host on which you try to read it? The error message that you get usually appears after the file has been transferred to another host with FTP in ASCII mode instead of BINARY mode.

http://seclists.org/wireshark/2010/May/287