Re: [Wireshark-users] R: U3 Package?

2007-02-03 Thread Gerald Combs
Ulf Lamping wrote: > Davide Schiera wrote: >> Hi Scott, >> have you tried to follow the link in the announcement >> (http://www.wireshark.org/download/) to find the link >> http://www.wireshark.org/download/win32/wireshark-0.99.5.u3p? >> > However, there's no link from the download web page to t

Re: [Wireshark-users] OUI Look Up Tool on Wireshark site?

2007-02-03 Thread Gerald Combs
Well, that _used_ to work, but it now tries to look up entries in an empty array (which is empty because the Ethereal SVN server has gone the way of the dodo). I managed to add an OUI lookup tool to the Wireshark site: http://www.wireshark.org/tools/oui-lookup.html It runs a little slow (on

Re: [Wireshark-users] Reassemble packets from Gnutella download?

2007-02-03 Thread d a
James Thanks for the response. Was hoping for something a bit more automated like the "export as raw data option" but I can work with this too. Il give it a try Dave "Small, James" <[EMAIL PROTECTED]> wrote: Dave, You should be able to do a follow TCP stream and save the contents to a file. Ho

Re: [Wireshark-users] V0.99.5 & Coloring Rules

2007-02-03 Thread Stephen Fisher
On Sat, Feb 03, 2007 at 12:02:55PM -, Keith French wrote: > Since upgrading to Wireshark V0.99.5 all captured packets are > displayed in the summary window as white text on a black background, > instead of using my Coloring Rules. > > My Coloring Rules worked fine under V0.99.4. I have trie

Re: [Wireshark-users] capturing packets in "stealth" mode on Windows

2007-02-03 Thread Guy Harris
Small, James wrote: > You want to uncheck everything except the Network Monitor Driver - I > believe this is what WinPcap is using to monitor the network adapter. Only for PPP interfaces. For LAN interfaces, it has its own driver for this. It doesn't appear to show up in the adapter properties

Re: [Wireshark-users] capturing packets in "stealth" mode on Windows

2007-02-03 Thread Small, James
Dave, Under the Network Adapter Properties, under the General Tab, you should see a list of clients/protocols/etc. that "use" the particular network adapter. For example: Client for Microsoft Networks VMware Bridge Protocol Deterministic Network Enhancer File and Printer Sharing for Microsoft Net

Re: [Wireshark-users] Reassemble packets from Gnutella download?

2007-02-03 Thread Small, James
Dave, You should be able to do a follow TCP stream and save the contents to a file. However, in order to edit the file, you need to use a hex editor. If you use a regular editor, it will mangle the file. Usually when I do this (for example saving a JPEG), I open a working JPEG in a Hex edito

Re: [Wireshark-users] capturing packets in "stealth" mode on Windows

2007-02-03 Thread Ulf Lamping
David Durgee wrote: > I have downloaded and installed Wireshark 0.99.4 on a > Windows 2000 system. I am able to capture packets on > my ethernet interface with the interface enabled and > in full operation, but if I disable the interface as I > expect I will need to in order to operate "stealthy"

Re: [Wireshark-users] R: U3 Package?

2007-02-03 Thread Ulf Lamping
Davide Schiera wrote: > Hi Scott, > have you tried to follow the link in the announcement > (http://www.wireshark.org/download/) to find the link > http://www.wireshark.org/download/win32/wireshark-0.99.5.u3p? > However, there's no link from the download web page to the package, which should be

[Wireshark-users] R: U3 Package?

2007-02-03 Thread Davide Schiera
Hi Scott, have you tried to follow the link in the announcement (http://www.wireshark.org/download/) to find the link http://www.wireshark.org/download/win32/wireshark-0.99.5.u3p? Ciao, Davide DS>-Messaggio originale- DS>Da: [EMAIL PROTECTED] DS>[mailto:[EMAIL PROTECTED] Per conto di

[Wireshark-users] capturing packets in "stealth" mode on Windows

2007-02-03 Thread David Durgee
I need to capture packets between a cable modem and a router for diagnostic purposes. I have inserted a hub between them, so I can attach the Win2K system to it, but I need to avoid having the capturing system inserting packets of its own as it might either mask the problem I am trying to diagnose

[Wireshark-users] U3 Package?

2007-02-03 Thread Scott Vermillion
OK all, just trying to understand what is meant in the 0.99.5 announcement of yesterday. It states that a u3 package has been "added to the release process." Is there a .u3p file out there somewhere or is this something that you need to compile for yourself? I am a network engineer -- not a s

[Wireshark-users] Reassemble packets from Gnutella download?

2007-02-03 Thread d a
Hello all, I posted a couple days ago and it never made the forum so I appologize if this is a repeat. First off...great software! I have about 12 hours of Wireshark use so far. Having trouble reassembling packets downloaded from Gnutella. I can reassemble HTTP image packets n/p. Someone please

Re: [Wireshark-users] help me people i am really a beguinner

2007-02-03 Thread Hans Nilsson
Right click on the MSNMS-packet and select "Follow TCP Stream" and you will see the data transmitted in a more easy to read way. On Fri, 2 Feb 2007 16:51:30 -0300 (ART), "dede dede" <[EMAIL PROTECTED]> said: > hi. > I dont understand internet, I am a really beguinner user . > I will study mor

[Wireshark-users] V0.99.5 & Coloring Rules

2007-02-03 Thread Keith French
Since upgrading to Wireshark V0.99.5 all captured packets are displayed in the summary window as white text on a black background, instead of using my Coloring Rules. My Coloring Rules worked fine under V0.99.4. I have tried deleting all existing entries in the Coloring Rules and re-importing