ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Bug in compressed sniffer file decode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>
Date: Wed, 03 Sep 2003 21:12:05 -0000
On Tue, 2003-09-02 at 18:03, Greg Morris wrote:

> To duplicate just open the CAZ file
> Select any item in the packet decode window and right click and match
> selected to create a simple filter.
> Finally click reset. I have had it several times just mark all of the
> packets as TCP segments and at other times it displays all of the
> packets as srvloc.
>  
> Attached is the trace file.
> ----
> 

FYI, regarding the 250-packet file, I opened the file, and then used the
down arrow to visit each packet. The final protocol in the dissection
(protocol tree) matched the information in the summary window. However,
as soon as I clicked a previous packet, i.e., traveled backward in the
file, the wrong data was loaded for that packet.

--gilbert