Wireshark · Ethereal-users: [Ethereal-users] Re: Removing duplicate frames via ip.id ?

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

I dont think there is a way to do this currently.


On 6/24/05, Barnaby DiAnni <bdianni@xxxxxxxxx> wrote:
> Hi,
> 
> Is there a way to filter out packets with duplicate IP Identifiers?  
> 
> Something along the lines of:
> 
> !ip.id.duplicate  ie..  "filter out non uniq ip.id packets" 
> 
> 
> Some sniffer captures often arrive with duplicate IP Identification due to
> the various ways that traffic can be spanned (mirrored) on a switch.
> 
> I'm aware of  
> 
> !tcp.analysis.duplicate_ack && !tcp.analysis.retransmission 
> 
> to filter these packets at the tcp layer.  But this may filter out valid
> retransmissions.
> 
> Thank you,
> 
> -- 
>     Barnaby 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>