Re: [Wireshark-users] Setting up a display offset

2007-07-22 Thread Luis EG Ontanon
On 7/22/07, Small, James <[EMAIL PROTECTED]> wrote: > For the general Wireshark community - is there a way to do the above and > still see the Ethernet frame but ignore the data in the middle? I thought in a way to implement it but I could not find a viable way. The problem is that we cannot kno

Re: [Wireshark-users] Setting up a display offset

2007-07-22 Thread Small, James
Hi Bill, Excellent question, I hope this helps: Try getting bittwist: http://bittwist.sourceforge.net/ It works on Windows/UNIX/Linux/BSD so you should be good on any platform You can get pre-compiled binaries for Windows Assuming you have a file in libpcap format: bittwiste -I original-packets

Re: [Wireshark-users] wireshark or linux kernel netfilter issue

2007-07-22 Thread Toralf Förster
Hi, thank's for your reply >have you had an opportunuty to see what actually goes through the wire? Unfortunately not :-( >What's the negotiated MTU ? The MRU is 1492. >BTW I found another bug in packet 14 of kscd_ppp0.pcap I filed this bug rebport : http://bugs.wireshark.org/bugzilla/show_bug