Re: [Wireshark-users] Using Tshark to get bandwidth utilization?

2007-05-22 Thread Feeny, Michael (GPCT-CAI)
Perfect! Thx. Michael Feeny CAI - Core Applications & Integration AIM - Application Infrastructure Management Office: 609-274-2761 Mobile: 484-995-1745 AOL IM: feenyman99 Pager: 888-merril0 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephen Fisher

[Wireshark-users] Conflict with Cisco VPN?

2007-05-22 Thread Mark McWhinney
Hello, Recently I installed Ethereal 0.99 / WinPcap 3 then upgraded to the current Wireshark 0.99.5 / WinPcap 4 on my Windows XP Pro laptop. I have been using Cisco VPN for a while without any trouble. Now, the VPN does not work on my network card but does work with my Wireless connection. Is i

Re: [Wireshark-users] Help with Output "TCP Dup ACK3#2 1320 > 22 ACK

2007-05-22 Thread ronnie sahlberg
also check the duplex settings in case you have a duplex mismatch. On 5/22/07, Mike Ciccone <[EMAIL PROTECTED]> wrote: > Martin/Stephen > Thanks for the answers... I'm on travel at the moment and won't be back to > look at this problem until Monday. I did check for ACL's and Firewalls > Blocks b

[Wireshark-users] Dissector Generator

2007-05-22 Thread Sebastien Tandel
Has anyone already seen this paper : "binpac: A yacc for Writing Application Protocol Parsers"? While it is not directly applicable to wireshark, it seems at least possible to use the grammar defined. What are you thinking of it? website : http://bro-ids.org/wiki/index.php/BinPAC Regards, Se

Re: [Wireshark-users] Using Tshark to get bandwidth utilization?

2007-05-22 Thread Stephen Fisher
On Mon, May 21, 2007 at 10:39:52PM -0400, Feeny, Michael (GPCT-CAI) wrote: > I have recently captured traffic from 6 different servers, on 4 > different days, resulting in a set of 24 capture files. For each of > these capture files, I would like to produce a "Mbps" value, > representing the a

Re: [Wireshark-users] Delay-Calculations with RTCP-Packets

2007-05-22 Thread Martin Mathieson
Just choose 'View | Time Display Format | Seconds since previous Displayed Packet', and you'll see that they are 1932ms apart. (I can't follow your calculations where you try to convert the absolute time to milliseconds - you don't need to do this). Martin On 5/22/07, Eram Khan <[EMAIL PROTECTED

[Wireshark-users] Using Tshark to get bandwidth utilization?

2007-05-22 Thread Feeny, Michael (GPCT-CAI)
Hi. I have recently captured traffic from 6 different servers, on 4 different days, resulting in a set of 24 capture files. For each of these capture files, I would like to produce a "Mbps" value, representing the associated bandwidth utilization, as is displayed by the "Statistics/Summary" menu

Re: [Wireshark-users] I Just Want URLs. How?

2007-05-22 Thread Barry Gould
NGrep, or Ngrep + Perl or Python or whatever if you want it to be pretty. Barry At 10:30 AM 5/19/2007, Mitch wrote: >I just got WireShark and I'm seeing way more than I need. I just want >to see URLs being sent and received, such as the URL for an embedded >Windows Media file, hidden in some com

Re: [Wireshark-users] Delay-Calculations with RTCP-Packets

2007-05-22 Thread Eram Khan
Hi!! Martin, well your explanation was quite helpful but I still have some queries. I used your 2 frames to do the delay calculation, I still get a negative value. Maybe I am not calculating it correctly. Im using the 2 frames u hav send to show it to u, maybe u can detect my mistake: De

Re: [Wireshark-users] Help with Output "TCP Dup ACK3#2 1320 > 22 ACK

2007-05-22 Thread Mike Ciccone
Martin/Stephen Thanks for the answers... I'm on travel at the moment and won't be back to look at this problem until Monday. I did check for ACL's and Firewalls Blocks but I am not finding any... I'll keep looking. Thanks, Michael Ciccone Network Engineer eToys Direct, Inc. Office: 303-226-86

Re: [Wireshark-users] Problems INSTALLING 0.99.4 solaris package

2007-05-22 Thread Joerg Mayer
On Tue, May 22, 2007 at 01:19:00PM +0200, Joerg Mayer wrote: > If it is so, please try the attached patch. Or even better, the patch attached to this email :) ciao Joerg -- Joerg Mayer <[EMAIL PROTECTED]> We are stuck with technology when what we r

Re: [Wireshark-users] Problems INSTALLING 0.99.4 solaris package

2007-05-22 Thread Joerg Mayer
On Tue, May 22, 2007 at 01:54:07PM +0800, arthy geraldin wrote: > I gave the command make solaris-package and it generated the package > wireshark-0.99.4-solaris2.10-sparc-local. > > But when i do a > > pkgadd -d wireshark-0.99.4-solaris2.10-sparc-local > > I get the following

Re: [Wireshark-users] Delay-Calculations with RTCP-Packets

2007-05-22 Thread Martin Mathieson
On 5/22/07, Eram Khan <[EMAIL PROTECTED]> wrote: Hi!! I am Eram Khan from Germany. Studying Computer Enginerring at the Niederrhein University of Applied Sciences and currently busy with my thesis project. I am testing the VoIP connections of a firm here in Germany with wireshark 0.99.5. T

Re: [Wireshark-users] how to extract only time stamp from captured file

2007-05-22 Thread Sake Blok
On Tue, May 22, 2007 at 02:37:08AM -0400, Korn Vajanapoom wrote: > > How could I extract the time stamp information from a captured file (which > is big more than ten thousand entries) ? > I want to use these numbers for a latency calculation. If you use a recent automated build available o

Re: [Wireshark-users] Wireshark Supported Protocols

2007-05-22 Thread Sake Blok
On Mon, May 21, 2007 at 05:51:13PM -0700, Gerald Combs wrote: > Sake Blok wrote: > > On Mon, May 21, 2007 at 12:16:46PM +0530, Kaushal Shriyan wrote: > >> Can I have a list of supported protocols on Wireshark and does Wireshark > >> supports smb protocol. > > > > I did a quick check on www.wiresha