Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Live capture/capture statistics mismatch

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Sat, 10 May 2008 13:30:11 -0600
On Thu, May 08, 2008 at 04:35:49PM -0400, CJ Miller wrote:

> I am using Ubuntu, a broadcom wireless card, and Wireshark 0.99.6 . I 
> started a live capture and in the Capture Interfaces window it shows 
> that there have been 2 million+ packets on this interface, but the 
> capture window is only showing about 25,000. I have capturing in 
> promiscuous mode on, and no filters or limits turned on. Could someone 
> please explain the discrepancy?

This sounds like a bug.  Does it happen every time you capture that many 
packets?  Do you have a capture file that you can save and reopen and it 
shows that problem every time?  Could you try a newer version of 
Wireshark (1.0 is out) and see if you have the same problem?


Steve