In Wireshark, while my host was loading several webpages with many
graphics, etc. I am only seeing about 200 TCP and 200 UPD packets, 3
ARPS, the rest "others". I think there should be more.
In tcpdump, it is harder to tell, but there are very few data packets
and many, many beacons, acknowledgements, and clear-to-send. If you
are looking at anything in specific I can write a small parser to
analyze the tcpdump file.
Thanks,
Tal
>
> On Jan 14, 2009, at 8:48 PM, Tal Rusak wrote:
>
>>> Are there any hosts on your network other than your host?
>>
>> Yes, the ones I am monitoring.
>
> So if those hosts are, for example, fetching Web pages, does anything
> show up in Wireshark or tcpdump?
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
