I should have thought of that :-)
However, when I do what you suggest, the offline filter shows BOTH sides of the conversation. The problem seems to occur only when filtering during an actual live capture.
I have followed the website procedures for submitting a bug and sent the info to the winpcap-bugs address.
Gianluca Varenni wrote:
Hi James.
Can you please try to dump the packets to disk with windump (no filter), then try to offline filter those packets offline with windump? If it fails, please send me then unfiltered trace file, and I'llk try to reproduce the problem.
Steps: 1. Capture to file "windump -i<some adapter> -w somefile.cap" 2. Offline filter the file "windump -r somefile.cap port 25"
Have a nice day GV
-- James Garrison Athens Group, Inc. mailto:[EMAIL PROTECTED] 5608 Parkcrest Dr http://www.athensgroup.com Austin, TX 78731 PGP: RSA=0x92E90A3B DH/DSS=0x498D331C (512) 345-0600 x150
================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
To unsubscribe use mailto: [EMAIL PROTECTED]
==================================================================
