Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] Requested Feature: Compare packet streams.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Aaron Turner <aturner@xxxxxxxxx>
Date: Thu, 2 Jun 2005 17:50:24 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It may be easier to use tomahawk (http://tomahawk.sourceforge.net/) to
do that.  Be aware though,  that it has a bug if your in-line device
changes  the ethernet padding on small packets.

- -Aaron

- -- 
Aaron Turner <aturner at pobox.com|synfin.net>  http://synfin.net/
They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety. -- Benjamin Franklin
All emails are PGP signed; a lack of a signature indicates a forgery.

On Thu, Jun 02, 2005 at 05:22:59PM -0500, Bill Ward wrote:
> Hello,
> 
>  
> 
> After looking around the website I was unable to find this 'feature'.
> I have an in-line product, which may or may not be messing with the
> packets.  (It is designed to do this, but not all the time).  I would
> like to have a process to compare the 2 streams (one taken on each side
> of my product).  While it may be difficult to align the stream, I have
> taken care of this for my case, by visiting a website that would not
> normally be visited (www.purple.com <http://www.purple.com/> ).  When I
> see the DNS a record request, I know they are in sync.
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Public key at: http://www.synfin.net/aturner/pgpkey.asc

iD8DBQFCn6lQhweYF/hu2uYRAslhAJsFIvSnLAH+z8JVtqpWr7jrx8J4aACggT9z
MVt/tAiVF0Bds75iCvRDa1A=
=1fta
-----END PGP SIGNATURE-----