Re: [Wireshark-users] tcp packets too big !?

2007-02-05 Thread Christophe Lohr
[EMAIL PROTECTED] a écrit : It appears to be a mis-calculation of the length. If you subtract the sequence numbers in the first trace (2874589889 - 2874588441) you get 1448, the same value as in the second. I don't know the reason for the miscalculation, but the actual packet length does

Re: [Wireshark-users] tcp packets too big !?

2007-02-05 Thread ronnie sahlberg
Do you have a nic with large segment offload in the host where you capture these large segments? If so the packets will be split into smaller segments in the NIC itself, below the point in the stack where you captured the packets. On 2/5/07, Christophe Lohr [EMAIL PROTECTED] wrote: [EMAIL

[Wireshark-users] Cross compiling on MIPS32 problem

2007-02-05 Thread Daniele Brevi
Hi to all, I'm trying to cross-compile tshark for a MIPS32 platform. I'm using the following command line in order to create the Makefile: ./configure --target mipsel-linux --host=mipsel-linux --build=i686-linux --enable-wireshark=no --with-pcap=/root/program/DD-WRT/src/router/libpcap_noring

[Wireshark-users] How to export / print packets as displayed, not sorted by column No

2007-02-05 Thread rod
Hello, I'd like to export/print (textfile) captured packets , as shown in the display, after I press a column. I tried all options, export, print displayed packets only, marked packets only etc. But always the packets are exported/printed sorted by the column No, it doesn't matter how the packets

Re: [Wireshark-users] How to export / print packets as displayed, not sorted by column No

2007-02-05 Thread Jaap Keuter
Hi, Nope, I'm refering to the option with which you select either Captured or Displayed, in the packet range pane. Thanx, Jaap On Tue, 6 Feb 2007, Ulf Lamping wrote: Jaap Keuter wrote: Hi, I think you should file a bug report on that. Please state that if you select Displayed in the

[Wireshark-users] Statistics grouped by port?

2007-02-05 Thread Brad Johnson
Hello everyone - longtime Ethereal/Wireshark user, first time poster. I'm banging my head against a wall here. I've always been thrilled with Wireshark's in-depth statistical analysis and ways of looking at connections. That being said, I have something very simple I want to do and can't figure

Re: [Wireshark-users] U3 Package?

2007-02-05 Thread Scott Vermillion
Ulf Lamping wrote: Davide Schiera wrote: Hi Scott, have you tried to follow the link in the announcement (http://www.wireshark.org/download/) to find the link http://www.wireshark.org/download/win32/wireshark-0.99.5.u3p? However, there's no link from the download web page to the package,

Re: [Wireshark-users] Cross compiling on MIPS32 problem

2007-02-05 Thread Jeff Morriss
[BTW, it's better to compose a new email rather than reply to an existing one on a different topic when sending to public mailing lists.] Daniele Brevi wrote: I'm trying to cross-compile tshark for a MIPS32 platform. [...] The problem is that when I run make it says that rdps executable

[Wireshark-users] Cross compiling on MIPS32 problem

2007-02-05 Thread Daniele Brevi
Hi to all, I'm trying to cross-compile tshark for a MIPS32 platform. I'm using the following command line in order to create the Makefile: ./configure --target mipsel-linux --host=mipsel-linux --build=i686-linux --enable-wireshark=no --with-pcap=/root/program/DD-WRT/src/router/libpcap_noring