Wireshark-users: Re: [Wireshark-users] Wireshark-users_Digest,_Vol_22,_Issue_77
From: "赵新元" <zhaoxinyuan2000@xxxxxxx>
Date: Sat, 29 Mar 2008 12:24:30 +0800
|
Steve, Thank you!
It works well!
2008-03-29
赵新元
发件人：
wireshark-users-request@xxxxxxxxxxxxx
发送时间： 2008-03-28 20:01:30
收件人：
wireshark-users@xxxxxxxxxxxxx
抄送：
主题：
Wireshark-users_Digest,_Vol_22,_Issue_77
Send Wireshark-users mailing list submissions to
wireshark-users@xxxxxxxxxxxxx
To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to
wireshark-users-request@xxxxxxxxxxxxx
You can reach the person managing the list at
wireshark-users-owner@xxxxxxxxxxxxx
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Wireshark-users digest..."
Today's Topics:
1. Re: Wireshark-users_Digest,_Vol_22,_Issue_75 (Stephen Fisher)
2. Summary View Info Column (Keith French)
3. Whireshark 0.99.7 can't find libgnutls.so.13 on
Solaris 10
(Thomas Kloeber)
4. dependencies error (mousami lokapur)
----------------------------------------------------------------------
Message: 1
Date: Thu, 27 Mar 2008 21:40:12 -0600
From: Stephen Fisher <stephentfisher@xxxxxxxxx
>
Subject: Re: [Wireshark-users]
Wireshark-users_Digest,_Vol_22,_Issue_75
To: Community support list for Wireshark
<wireshark-users@xxxxxxxxxxxxx >
Message-ID: <[email protected] >
Content-Type: text/plain; charset=utf-8
On Fri, Mar 28, 2008 at 11:24:09AM +0800, 赵新元 wrote:
> #tshark -i 3 -o column.format:'"Info", "%i"'
>
> I use this command ,but it cann't work!
The ' marks only work on Unix. I just tried on Windows using a "
instead of ' and it works:
tshark -o column.format:""Info", "%i""
Steve
------------------------------
Message: 2
Date: Fri, 28 Mar 2008 11:06:25 -0000
From: "Keith French" <keithfrench@xxxxxxxxxxxxx
>
Subject: [Wireshark-users] Summary View Info Column
To: "Wireshark-Users" <wireshark-users@xxxxxxxxxxxxx
>
Message-ID: <000801c890c3$c3ea6500$4001a8c0@kfhome >
Content-Type: text/plain; charset="iso-8859-1"
When a TCP session is initialised or closed, the TCP SYN & FIN handshakes shows the port numbers at the start of the Info column in the Summary view within Wireshark. This always used to take the format (in the case of a SYN) of the unresolved source port followed by the destination resolved port. So you might see something like:-
4000 > http [SYN]
In recent versions of Wireshark this behaviour seems to have changed, in that it tries to resolve the source port of the SYN as well. The name it resolves it to (on my PC anyway) is often misleading:-
qsnet-trans > http [SYN]
I have looked in the preferences, but cannot find anywhere to force the info column to display this port unresolved (i.e. just it's port number).
Is there a way to do this?
Keith French.
-------------- next part --------------
An HTML attachment was scrubbed...
------------------------------
Message: 3
Date: Fri, 28 Mar 2008 12:29:33 +0100
From: Thomas Kloeber <kloeber@xxxxxx >
Subject: [Wireshark-users] Whireshark 0.99.7 can't find
libgnutls.so.13 on Solaris 10
To: wireshark-users@xxxxxxxxxxxxx
Message-ID: <47ECD69D.3000709@xxxxxx >
Content-Type: text/plain; charset="iso-8859-1"
Folks'es,
I just downloaded wireshark 0.99.7 for Solaris 10 (SPARC) from
sunfreeware.com including all the dependencies. Everything worked until
I try to start it. I get that message that wireshark can't find
libgnutls.so.13, see following ldd output:
obelix2:/usr/lib# ldd /usr/local/bin/wireshark
libwiretap.so.0 =
> /usr/local/lib/libwiretap.so.0
libwireshark.so.0 =
> /usr/local/lib/libwireshark.so.0
libcrypto.so.0.9.8 =
> /usr/local/ssl/lib/libcrypto.so.0.9.8
libpcre.so.0 =
> /usr/local/lib/libpcre.so.0
libgtk-x11-2.0.so.0 =
> /usr/local/lib/libgtk-x11-2.0.so.0
libgdk-x11-2.0.so.0 =
> /usr/local/lib/libgdk-x11-2.0.so.0
libatk-1.0.so.0 =
> /usr/local/lib/libatk-1.0.so.0
libgdk_pixbuf-2.0.so.0 =
>
/usr/local/lib/libgdk_pixbuf-2.0.so.0
libmlib.so.2 =
> /usr/lib/libmlib.so.2
libpangocairo-1.0.so.0 =
>
/usr/local/lib/libpangocairo-1.0.so.0
libpangoft2-1.0.so.0 =
> /usr/local/lib/libpangoft2-1.0.so.0
libpango-1.0.so.0 =
> /usr/local/lib/libpango-1.0.so.0
libcairo.so.2 =
> /usr/local/lib/libcairo.so.2
libfontconfig.so.1 =
> /usr/local/lib/libfontconfig.so.1
libfreetype.so.6 =
> /usr/local/lib/libfreetype.so.6
libexpat.so.1 =
> /usr/local/lib/libexpat.so.1
libpng12.so.0 =
> /usr/local/lib/libpng12.so.0
libXrender.so.1 =
> /usr/local/lib/libXrender.so.1
libSM.so.6 =
> /usr/openwin/lib/libSM.so.6
libICE.so.6 =
> /usr/openwin/lib/libICE.so.6
libX11.so.4 =
> /usr/openwin/lib/libX11.so.4
libm.so.2 =
> /usr/lib/libm.so.2
libgobject-2.0.so.0 =
> /usr/local/lib/libgobject-2.0.so.0
libgmodule-2.0.so.0 =
> /usr/local/lib/libgmodule-2.0.so.0
libgthread-2.0.so.0 =
> /usr/local/lib/libgthread-2.0.so.0
libpthread.so.1 =
> /usr/lib/libpthread.so.1
libthread.so.1 =
> /usr/lib/libthread.so.1
librt.so.1 =
> /usr/lib/librt.so.1
libglib-2.0.so.0 =
> /usr/local/lib/libglib-2.0.so.0
libiconv.so.2 =
> /usr/local/lib/libiconv.so.2
libgnutls.so.13 =
> (Datei nicht gefunden)
libgcrypt.so.11 =
> /usr/lib/libgcrypt.so.11
libgpg-error.so.0 =
> /usr/lib/libgpg-error.so.0
libsocket.so.1 =
> /usr/lib/libsocket.so.1
libnsl.so.1 =
> /usr/lib/libnsl.so.1
libz.so =
> /usr/local/lib/libz.so
libc.so.1 =
> /usr/lib/libc.so.1
libgcc_s.so.1 =
> /usr/local/lib/libgcc_s.so.1
* libgnutls.so.13 =
> (Datei nicht gefunden)*
libdl.so.1 =
> /lib/libdl.so.1
libXrandr.so.2 =
> /usr/lib/libXrandr.so.2
libXext.so.0 =
> /usr/openwin/lib/libXext.so.0
libexpat.so.0 =
> /usr/local/lib/libexpat.so.0
libaio.so.1 =
> /lib/libaio.so.1
libmd.so.1 =
> /lib/libmd.so.1
libmp.so.2 =
> /lib/libmp.so.2
libscf.so.1 =
> /lib/libscf.so.1
libXrender.so.1 =
> /usr/openwin/sfw/lib/libXrender.so.1
libdoor.so.1 =
> /lib/libdoor.so.1
libuutil.so.1 =
> /lib/libuutil.so.1
libgen.so.1 =
> /lib/libgen.so.1
/usr/lib/cpu/sparcv9+vis2/libmlib.so.2
/platform/SUNW,A70/lib/libc_psr.so.1
/platform/SUNW,A70/lib/libmd_psr.so.1
obelix2:/usr/lib#
and indeed, I only have libgnutls.so.6.0.5. I tried linking it to
libgnutls.so.13 but then wireshark just eats up all my CPU cycles but
does nothing else.
I searched hi and lo for this library but can't find it anywhere. Can
some kind soul out there either
* tell me where to get it and
* tell me why it might be missing
Thanx,
Thomas
--
Dipl.Inf. (FH)
Thomas Klöber
Senior Consultant
Leibnizpark 1
51503 Rösrath
Germany
T: +49 (0) 2205 89 555 8
Web: www.ics.de
Intelligent Communication Software Vertriebs GmbH
Firmensitz: Kistlerhof Str. 111, 81379 München
Registergericht: Amtsgericht München, HRB 88283
Geschäftsführer: Albert Fuss
-------------- next part --------------
An HTML attachment was scrubbed...
------------------------------
Message: 4
Date: Fri, 28 Mar 2008 17:00:51 +0530
From: mousami lokapur <mousami31@xxxxxxxxxxx >
Subject: [Wireshark-users] dependencies error
To: <wireshark-users@xxxxxxxxxxxxx >
Message-ID: <BAY106-W14BCBB8C64E30B2249376EACF90@xxxxxxx
>
Content-Type: text/plain; charset="windows-1252"
I want to install wireshark on linux.
when i try to rebuild wireshark-0.99.2-EL3.1.src.rpm using
> rpmbuild --rebuild wreishark-0.99.2-EL3.1.i386
i am getting following error::
net-snmp-devel
>= 5.0 is needed by wireshark-0.99.2-EL3.1.i386
net-snmp-utils
>= 5.0 is needed by wireshark-0.99.2-EL3.1.i386
elfutils-devel is needed by wireshark-0.99.2-EL3.1.i386
Please let me know if this error will get eliminated completly if i install elfutils-devel-0.97-3.i386.rpm, net-snmp-utils-5.0.6-7.i386.rpm and net-snmp-devel-5.0.6-7.i386.rpm.
One more thing:
can any one please tell me how to measure the network latency using wireshark.. in my case message are being sent between linux and windows machine.
thanks
_________________________________________________________________
Fashion Channel : Want to know what’s the latest in the fashion world ? You have it all here on MSN Fashion.
-------------- next part --------------
An HTML attachment was scrubbed...
------------------------------
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
End of Wireshark-users Digest, Vol 22, Issue 77
*********************************************** |
- Prev by Date: [Wireshark-users] Is it possible to merge multiple capture files based on a filter?
- Next by Date: [Wireshark-users] application-pcap mime type for XDG / Linux
- Previous by thread: [Wireshark-users] Is it possible to merge multiple capture files based on a filter?
- Next by thread: [Wireshark-users] application-pcap mime type for XDG / Linux
- Index(es):
- Get Wireshark
- Download
- Code of Conduct