Re: [Wireshark-users] Has anyone installed RTP tools in a windowscomputer????

2008-03-03 Thread Fabiana moreno
yeah i installed this already Thanks!! On 03/03/2008, Lars Ruoff [EMAIL PROTECTED] wrote: Are you taling about these: http://www.cs.columbia.edu/irt/software/rtptools/download/ ?? Simply unpack the file. Then run from command line. Lars -- *From:* [EMAIL

[Wireshark-users] TCP Retransmitted Packet Assigned with New Seq #

2008-03-03 Thread Becky Vict
Hi everyone, I have noticed a few retransmitted packets in my captures that are assigned with new seq # by the server. For example packets with seq. # 1, 2, 3, 4 are lost and the server retransmits 1, 2, 11 and 12; 11 and 12 being totally new but part of the retransmissions and there will be

[Wireshark-users] Playback a capture file

2008-03-03 Thread Frédéric BERNON
Hi group, I would like to know if it's possible to playback a capture file: with playback, I want to say resend captured packets with the same (or nearest timing). I use wireshark 0.99.8. Thank you Frédéric BERNON HYMATOM SA Chef de projet

Re: [Wireshark-users] TCP Retransmitted Packet Assigned with New Seq #

2008-03-03 Thread Sake Blok
On Mon, Mar 03, 2008 at 02:28:53AM -0800, Becky Vict wrote: Hi everyone, I have noticed a few retransmitted packets in my captures that are assigned with new seq # by the server. For example packets with seq. # 1, 2, 3, 4 are lost and the server retransmits 1, 2, 11 and 12; 11 and 12

[Wireshark-users] How do I add a custom MIB?

2008-03-03 Thread d.hoeffer
Hi, Can anybody point me in the right direction on how to add MIBs for SNMP to Wireshark? I'm using 0.99.8pre1 on Windows. What I tried is to just add my MIB to the directory with all the other MIBs, rename it to .txt, add an entry to the .index file. Any ideas? Googling around yielded no

Re: [Wireshark-users] tShark SSL Decryption Issue

2008-03-03 Thread Robert D. Scott
A little more info on the server: Is there only 1 Web listener on a single IP and all the sights use URI information to direct http requests to the correct web? The two packets you included from your debug file 1 18 are packet_from_server: is from server - FALSE. These did not come from the IP

Re: [Wireshark-users] How do I add a custom MIB?

2008-03-03 Thread Jaap Keuter
Hi, Goto preferences and select the Name Resolution page. There you can enter the SMI MIBS and Paths. Thanx, Jaap Hi, Can anybody point me in the right direction on how to add MIBs for SNMP to Wireshark? I'm using 0.99.8pre1 on Windows. What I tried is to just add my MIB to the directory

Re: [Wireshark-users] tShark SSL Decryption Issue

2008-03-03 Thread Al Aghili
Hi Robert, Thank you for you response. To answer your question for the server issue yes it's a single IP and all of the sights use the URI information direct to the correct web. Your second question is yes the packets did not come from the IP in the ssl_init string but they are going to the ip in

Re: [Wireshark-users] How do I add a custom MIB?

2008-03-03 Thread Donaldson Charles-MGI1064
Do you see the MIBS tab in preferences? If not try installing the libsmi library. If you do see the tab then use the MIB Module edit dialog to add your MIBs to Wireshark. -Original Message- From: d.hoeffer [mailto:[EMAIL PROTECTED] Sent: Monday, March 03, 2008 6:18 AM To:

[Wireshark-users] Remote manager for wireshark dump?

2008-03-03 Thread flavio
Hi to all, I'm a newbie for this list but I've pleasure to use Wireshark from a long time. I've just a little question for you: can anyone indicate me some tool to open wireshark dump file (i.e. .pcap files or .cap files) from remote? In other word I dump some traces on my server with tshark and I

Re: [Wireshark-users] Decoding packets from a Cisco's ip traffic-export flow

2008-03-03 Thread Frank Bulk
Based on the other postings, it looks like I need to test this on another platform. I may have omitted to mention this earlier, but IP Traffic Export is not mentioned in Cisco's Feature Navigator for this code release on the 7200. It's possible that this feature was compiled in but never tested

Re: [Wireshark-users] Decoding packets from a Cisco's ip traffic-export flow

2008-03-03 Thread Frank Bulk
Thanks for the detailed analysis. I think you're right on. Hopefully TAC can set me straight. Frank -Original Message- From: Sake Blok [mailto:[EMAIL PROTECTED] Sent: Sunday, March 02, 2008 2:56 AM To: [EMAIL PROTECTED]; Community support list for Wireshark Subject: Re:

Re: [Wireshark-users] Playback a capture file

2008-03-03 Thread Jaap Keuter
Hi, Have a look at http://wiki.wireshark.org/Tools Thanx, Jaap Frédéric BERNON wrote: Hi group, I would like to know if it's possible to playback a capture file: with playback, I want to say resend captured packets with the same (or nearest timing). I use wireshark 0.99.8. Thank you

Re: [Wireshark-users] Decoding packets from a Cisco's ip traffic-export flow

2008-03-03 Thread Frank Bulk
They had different Virtual-Access interfaces, but the physical source interface on both of these was the same and they were derived from the same Virtual-Template. The whole semi-randomness of this would be a bit difficult to implement in a dissector. =) Frank -Original Message- From:

[Wireshark-users] Wireshark to obtain password (Yahoo Mail - Ypops - Outlook)

2008-03-03 Thread Daniel at EnigmaBiz
I know it is tricky to obtain and sniff the password out butwould it be easier if the password is already inputted into Outlook using the YPOPS softwareand gathering the emails from 127.0.0.1 instead. Ypops acts as a middle-soft to retrievethe emails. Or is there a open source or

Re: [Wireshark-users] Wireshark to obtain password (Yahoo Mail - Ypops - Outlook)

2008-03-03 Thread Gerald Combs
Daniel at EnigmaBiz wrote: Or is there a open source or software out there to reveal the password that’s been saved as asterisk in outlook? Protected Storage PassView (http://www.nirsoft.net/utils/pspv.html) is supposed to do this. I haven't tried it myself.

Re: [Wireshark-users] Wireshark to obtain password (Yahoo Mail - Ypops - Outlook)

2008-03-03 Thread Frank Bulk
Yes, there is: http://www.nirsoft.net/utils/mailpv.html Frank From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel at EnigmaBiz Sent: Monday, March 03, 2008 12:37 PM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Wireshark to obtain password (Yahoo Mail -

Re: [Wireshark-users] Decoding packets from a Cisco's ip traffic-export flow

2008-03-03 Thread Frank Bulk
Good catch! I used that information to put together a batch file that repairs all the entries in the packet flow that I have. It came down to 4 different cases. I basically end up stripping out the PPPoE section. REM Mostly ipversion=0 and all of ipversion=5 C:\Program

Re: [Wireshark-users] Decoding packets from a Cisco's ip traffic-export flow

2008-03-03 Thread Frank Bulk
There was a mistake that cut me a two packets short. Here it is again, better formatted. REM Mostly ipversion=0 and all of ipversion=5 C:\Program Files\Wireshark\tshark.exe -r %1.pcap -R eth[19:2] == 4500 -w c:\temp\tmp-a.pcap c:\temp\bittwist-1.0\bin\bittwiste -I c:\temp\tmp-a.pcap -O

[Wireshark-users] Estaré ausente de la oficina h asta el 25/03/2008

2008-03-03 Thread ruth . elorzadelrio
Estaré ausente de la oficina desde el 03/03/2008 y no volveré hasta el 25/03/2008. Puedes contactar con Maria Jesús Alonso Gil a través de la siguiente dirección de correo: [EMAIL PROTECTED] Saludos.Ruth. ___ Este mensaje

Re: [Wireshark-users] packet loss rate

2008-03-03 Thread Hansang Bae
Esma Y?ld?r?m wrote: Hello How can I measure the packet loss rate with Wireshark? In my case I am sending a file of 512MB and wireshark captures the packets on my computer. This isn't as straight forward as it sounds. The packet losses can generate triple duplicate ACKs for example, and you

Re: [Wireshark-users] troubleshooting ftp timeout using wireshark

2008-03-03 Thread Hansang Bae
luis pena wrote: Hello all, my first post so forgive me if I omit any info. I am observing a FTP timeout on our network that I am hoping to pin down using Wireshark. The network is an 18 node Frame Relay WAN. Nodes are connected via point-to-point T1 using Cisco 2600s to a central hub