Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Help! errors in CAPTURED UDP stream that I know is perfectly c

From: Roni Peleg <Roni.Peleg@xxxxxxxxxxxxxx>
Date: Tue, 8 Nov 2011 01:08:57 -0500

Hi Wiresharkers,

 

I’m a newbie so please pardon me if I describe my problem clumsily.

 

Attached is a picture of the way I capture a file.

 

I do the next:

 

1. I inject a perfectly clean MPEG stream over UDP  into a PC with Ethernet 1Gigabit interface network card.

   (I know it’s clean for sure, and anyway I also checked by some reliable testing tools such as StreamXpert running on the same PC, connected to the same interface port)

2. I close all windows, no program is running on the PC. The UDP stream continues flowing in all the time.

3. I open Wireshark, set a capture-file and start recording (I tried with and without filtering only the relevant IP).

4. From the resulting capture-file I’m striping the MPEG stream out of the UDP encapsulation. (did this a hundred times, it’s 100% reliable)

5. in the resulting MPEG stream I get “Continuity-Counter Errors” which means packets were lost or mixed with another stream.

6. Actually, instead of steps 4-5 I later on simply ran Wireshark’s MPEG-TS-checker and indeed the Wireshark itself reported the same  CC Errors!

 

Have you ever encountered such a problem?

Could it be that Wireshark is too weak to record a ~50Mbps stream into a capture file?

What should I do??

 

 

Thanks in advance,

Roni

 

Attachment: wirepic1.bmp
Description: wirepic1.bmp

Attachment: wirepic2.bmp
Description: wirepic2.bmp