The IxVeriWave heuristic now gets more false positives (after, I
authorguy <guy@f5534014-38df-0310-8fa8-9805f1628bb7>
Fri, 13 Dec 2013 02:38:11 +0000 (02:38 +0000)
committerguy <guy@f5534014-38df-0310-8fa8-9805f1628bb7>
Fri, 13 Dec 2013 02:38:11 +0000 (02:38 +0000)
suspect, the change to handle VWR files with no packets); shuffle it
after all the types we've seen misidentified as VWR files.

git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@54012 f5534014-38df-0310-8fa8-9805f1628bb7

wiretap/file_access.c

index 9a5993853b568db231321339701a6a93f6a8b161..fa9c8b0f0b4eb4cbb85b09fb249289ecd502df84 100644 (file)
@@ -353,10 +353,14 @@ static wtap_open_routine_t open_routines_base[] = {
         * I put VWR *after* ERF, because there were some cases where
         * ERF files were misidentified as vwr files (Stephen
         * Donnelly, August 2013; see bug 9054)
+        *
+        * I put VWR *after* Peek Classic and NetScaler, because
+        * there were some cases where Peek Classic and NetScaler
+        * files were misidentified as vwr files (Guy Harris,
+        * December 2013)
         */
        netscreen_open,
        erf_open,
-       vwr_open,
        ipfix_open,
        k12text_open,
        peekclassic_open,
@@ -372,6 +376,7 @@ static wtap_open_routine_t open_routines_base[] = {
        hcidump_open,
        commview_open,
        nstrace_open,
+       vwr_open,
        camins_open
 };