Wireshark mailing list archives

Re: Can't use Wireshark with a smbfs mount


From: Guy Harris <guy () alum mit edu>
Date: Mon, 5 Jul 2010 11:03:45 -0700


On Jul 5, 2010, at 9:15 AM, Jeanne Clément wrote:

I’ve build a test platform with Linux Ubuntu and I want to capture and store pcap file directly to another server 
(Win7 64bits).
I’ve installed the smbfs 2:3.4.0-3ubuntu5.6 package and mounted the share on /mnt/trace
mount -t smbfs //10.35.10.223/trace /mnt/trace -o workgroup=WORKGROUP,username=admin
Then I’m able to write a file in my share both from shell (mkdir test) and from a gnome app (gedit), but not from 
Wireshark. I got the message: The file “/mnt/trace/test/pcap” could not be opened: Value to big for defined datatype.

Does this happen only with files on an SMB server?  If so, it's probably that smbfs is not properly performing the 
checks for files >= 2GB in size, and rejecting non-O_LARGEFILE opens or seeks even if the file is < 2GB in size.

Can you use cifsfs instead?
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: