Re: [Wireshark-users] Beginner

2007-07-12 Thread Laura Chappell
and reconnaissance. Free to all. I agree with the need to understand the protocols! I co-authored “Guide to TCP/IP” with Ed Tittel – not sure where it is sold – it’s used as a college textbook – check Amazon I guess. Laura Chappell Founder, Wireshark University Sr. Protocol/Security Analyst

Re: [Wireshark-users] Wireshark conference

2007-06-30 Thread Laura Chappell
I'd go! grin Sounds like a great idea, Gerald! Laura Chappell Founder, Wireshark University Sr. Protocol/Security Analyst, Protocol Analysis Institute ** This message is intended only for the use of the addressee and may

Re: [Wireshark-users] Limit _certain_ packets to 67 bytes?

2007-06-28 Thread Laura Chappell
Yes, in the Capture Options window select Limit each packet to bytes and fill out the number of bytes you want. Laura Chappell Founder, Wireshark University Sr. Protocol/Security Analyst, Protocol Analysis Institute

Re: [Wireshark-users] Limit _certain_ packets to 67 bytes?

2007-06-28 Thread Laura Chappell
and no DNS/DHCP. Then merge the two trace files. just an idea. Laura Chappell Founder, Wireshark University Sr. Protocol/Security Analyst, Protocol Analysis Institute ** This message is intended only for the use

Re: [Wireshark-users] TCP Window Size

2007-06-13 Thread Laura Chappell
the Window Update is received. It's a nice trace - it was a terrible download - over a 32 second delay because of the client TCP buffer space being overloaded. Ouch. Laura Chappell Founder, Wireshark University Sr. Protocol/Security Analyst, Protocol Analysis Institute www.wiresharkU.com From

Re: [Wireshark-users] OUI Look Up Tool on Wireshark site?

2007-01-21 Thread Laura Chappell
Keith, You could go straight to the IEEE to read the list (http://standards.ieee.org/regauth/oui/oui.txt) or do a lookup online (http://standards.ieee.org/regauth/oui/index.shtml). Hope that helps. (I couldn't access the link you provided, so I couldn't see how the lookup tool worked -

Re: [Wireshark-users] Duplicate Packet ID

2007-01-16 Thread Laura Chappell
Reza... Here is an idea, but it will only dump the duplicate packet (not the original) and it is set for TCP only. No UDP equivalent that I know of. tshark -R tcp.analysis.retransmission -w filename Use the capital 'R' to indicate you are using display filter syntax. The