Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '13 - Wireshark Developer and User Conference - June 16-19, 2013 - UC Berkeley
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Netmon 3.3 capture in Wireshark 1.2.1 - only 2 packets get Expert Info results

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 1 Sep 2009 15:45:07 -0700


On Sep 1, 2009, at 11:43 AM, Troy Tate wrote:

I have a packet capture from a Windows machine running Network Monitor 3.3. I am trying to analyze in Wireshark 1.2.1 (running on Vista Ultimate). Only the first two packets (syn, syn/ack) are getting analyzed under Expert Info.

What are you expecting Wireshark to say about the other 64 packets? Perhaps it's not finding anything to say about them.

  • References:
    • [Wireshark-users] Netmon 3.3 capture in Wireshark 1.2.1 - only 2 packets get Expert Info results
      • From: Troy Tate
  • Prev by Date: Re: [Wireshark-users] iSCSI display filter
  • Next by Date: Re: [Wireshark-users] How can I obtain the application layer protocol using "tshark -T fields -e ??"
  • Previous by thread: [Wireshark-users] Netmon 3.3 capture in Wireshark 1.2.1 - only 2 packets get Expert Info results
  • Next by thread: [Wireshark-users] display filter
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation