[Wireshark-users] tshark: print x number of bytes at arbitrary offset?

Hi yall, Is there a way I can print some number of bytes at an arbitrary offset without writing a complete dissector? For example, in the following packet I'd like to be able to strip out the two bytes starting at 0x0030. Ideally, I'd be able to use this with -e to tshark and have it print 4f88

Re: [Wireshark-users] TCP option

On Oct 4, 2007, at 1:56 AM, Billie Chan wrote: > Any idea how come 12 bytes tcp.option occur? Because the TCP implementation on the machine sending the TCP segment decided to add that option to the TCP segment. What option is it? We'd need to know in order to try to guess why it's being ad

Re: [Wireshark-users] TCP option

Hi, It would be helpfull if you could: 1. state the version you use, and on what platform 2. attach a sample capture with a (single) packet showing this. Thanx, Jaap Billie Chan wrote: > Dear All, > > Any idea how come 12 bytes tcp.option occur? It's eat up 12 bytes data > and cause 1448 byte

Re: [Wireshark-users] Fedora7

Thierry Granier wrote: > Hi everybody, > is there a version of Wireshark for Linux Fedora 7? > Regards > Thierry Fedora 7 ships with Wireshark 0.99.5, see the list of packages: ftp://ftp.free.fr/mirrors/fedora.redhat.com/fedora/linux/releases/7/Fedora/i386/os/Fedora/ and it looks like there is

Re: [Wireshark-users] Estimate tcp packet loss from receiver end only

Hi, one way is, you can check the number (and cause if possible) of retransmitted packets exporting the tcp conversation for example to an excel. That will give you the amount of lost packets during the connection. I don´t know whether WS has an option to do this (I didn´t find that). Br, Juan

[Wireshark-users] Fedora7

Hi everybody, is there a version of Wireshark for Linux Fedora 7? Regards Thierry ___ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users

[Wireshark-users] Estimate tcp packet loss from receiver end only

Hi, I am new to wireshark and I am trying to find a way to obtain a rough estimate of the number of tcp packets lost from sender to receiver if I am only running wireshark from the receiver end. Is there a way to do this? Googling has produced no results so far. Thanks in advance, Eric __

[Wireshark-users] TCP option

Dear All, Any idea how come 12 bytes tcp.option occur? It's eat up 12 bytes data and cause 1448 bytes MSS only. BR Billie Chan Experience the true Internet. Right on your mobile. Right now. www.smartone-vodafone.com E-mail Disclaimer ***

Re: [Wireshark-users] cannot install gtk1 on windows 2k ... option not selectable ...

IT Officer schrieb: > Hello. I just downloaded WS 0.99.6a. I am installing it on a remote W2K > server. I installed it and found the user interface almost unusable. > After searching it seems that this is related to GTK2 problems with 256 > colour displays. The workaround suggested was to install t