[Wireshark-users] Wireshark and 2GB capture files

Hi - I was just wondering if there was support for trace files larger than 2GB on x86 machines (CentOS 5) by any chance? And if so, how do you go about getting this to work? 2.6.18-8.1.3.el5 libpcap-devel-0.9.4-8.1 libpcap-0.9.4-8.1 wireshark-0.99.5 sorry, I'm new, so I apologize if

Re: [Wireshark-users] Wireshark and 2GB capture files

for file sizes would've been capinfos but it does care :-) Would a 64bit edition of WS (or built on that platform) help any? Thanks, Alex Lee Riverbed Technology From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED

[Wireshark-users] Right-click and open a tcp stream in a new window?

Hi Wireshark-Dev folks - I do a lot of these a lot for work: Tcp.flags.syn == 1 tcp.flags.ack == tcp.port == some app A lot of times I need to follow each new connection's stream but often times, I end up not finding what I need in the first few streams. Is it possible to add a right-click

Re: [Wireshark-users] Right-click and open a tcp stream in anew window?

to look alike (at least the first 100 characters or so). I have a pretty strong (or I'd like to believe) PC and figured something like this could be easily incorporated efficiently w/out having to re-read from the disk/share? Thanks, Alex Lee Riverbed Technology -Original Message- From

[Wireshark-users] Is there a way we can replace IP addresses with bogus ones?

Is there a way/tool that can replace IP addresses with face ones without screwing up the capture file? Its for end-user secrecy and what not. Alex Lee ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman