Re: [Wireshark-users] Which hardware

2008-02-08 Thread ronnie sahlberg
On Sat, Feb 9, 2008 at 12:27 PM, Ulf Lamping <[EMAIL PROTECTED]> wrote: > ronnie sahlberg schrieb: > > Personal first hand experience. > > > SCNR to ask your motivations ;-) > > > I have tested this myself on several PCs and compared. The same host, > > the same capture file, the same preferen

Re: [Wireshark-users] Which hardware

2008-02-08 Thread Ulf Lamping
ronnie sahlberg schrieb: > Personal first hand experience. > SCNR to ask your motivations ;-) > I have tested this myself on several PCs and compared. The same host, > the same capture file, the same preferences using the same SVN version > of wireshark > it ran 2+ times faster when booting int

Re: [Wireshark-users] Which hardware

2008-02-08 Thread ronnie sahlberg
the OSX tests was on "similarly" specced hardware. I could obviously not test how OSX Wireshark behaved/performed on the same physical machine I tested with Windows. On Sat, Feb 9, 2008 at 11:25 AM, ronnie sahlberg <[EMAIL PROTECTED]> wrote: > Personal first hand experience. > > > I have test

Re: [Wireshark-users] Which hardware

2008-02-08 Thread ronnie sahlberg
Personal first hand experience. I have tested this myself on several PCs and compared. The same host, the same capture file, the same preferences using the same SVN version of wireshark it ran 2+ times faster when booting into linux than w2k and w2k3. Bear in mind, the tests were all for semi l

Re: [Wireshark-users] Which hardware

2008-02-08 Thread Ulf Lamping
ronnie sahlberg schrieb: > Use a linux box to run wireshark on instead. > It is cheaper than terminal servers and as a bonuson the same > hardware, processing the same capture files, wireshark will run > several times faster on linux than w2k3 > Do you have any hard facts, or is this the u

Re: [Wireshark-users] Which hardware

2008-02-08 Thread ronnie sahlberg
Use a linux box to run wireshark on instead. It is cheaper than terminal servers and as a bonuson the same hardware, processing the same capture files, wireshark will run several times faster on linux than w2k3 On Sat, Feb 9, 2008 at 1:46 AM, Taco Amory <[EMAIL PROTECTED]> wrote: > Hi, >

Re: [Wireshark-users] Compilation problems with CVS libpcap

2008-02-08 Thread Guy Harris
Stephen O'Connell wrote: > /usr/local/lib/libpcap.a(gencode.o): In function `.L186': > gencode.c:(.text+0x869): undefined reference to `pcap_parse' In the source tree of the version of libpcap you built, what does the command "egrep pcap_parse *.[chyl]" print? ___

Re: [Wireshark-users] http Content-Encoding: gzip not decoding

2008-02-08 Thread Sake Blok
On Fri, Feb 08, 2008 at 09:41:16AM -0800, Bob Keyes wrote: > I've been trying to figure out some weirdness with the > Amtrak reservations web site, and have applied > Wireshark to the task. Packets are sniffed, tcp > streams assembled, but when it comes time to decode > gzip encoded content, I get

Re: [Wireshark-users] capture filter to isolate one router's traffic from all

2008-02-08 Thread Sake Blok
On Fri, Feb 08, 2008 at 12:32:34PM -0500, Matthew Moeller wrote: > > I have a spanned port which spans 3 edge segments to our network. I'm > trying to create a filter which would isolate traffic from one of the three > edge routers that feed this port, can this be done? > > I tried the filter:

[Wireshark-users] http Content-Encoding: gzip not decoding

2008-02-08 Thread Bob Keyes
Hello, I've been trying to figure out some weirdness with the Amtrak reservations web site, and have applied Wireshark to the task. Packets are sniffed, tcp streams assembled, but when it comes time to decode gzip encoded content, I get nowhere. I am running 0.99.6 on Ubuntu Gutsy. I have seen refe

[Wireshark-users] capture filter to isolate one router's traffic from all

2008-02-08 Thread Matthew Moeller
I have a spanned port which spans 3 edge segments to our network. I'm trying to create a filter which would isolate traffic from one of the three edge routers that feed this port, can this be done? I tried the filter: gateway host in the help section of the windows version but can't seem to ge

[Wireshark-users] Which hardware

2008-02-08 Thread Taco Amory
Hi, Maybe somebody could help me? In our company we want to sniff on an Ethernet line to Internet. Currently we have an average throughput of 35 Mbit/s. We have already placed a line tap inline on the connection towards internet. The wish is that more then one user can use wireshark simultaneous

[Wireshark-users] Compilation problems with CVS libpcap

2008-02-08 Thread Stephen O'Connell
Hi, I would like to use Wireshark to monitor USB transfers - to do this I believe I need to use a CVS version of libpcap because the USB code hasn't made it in to a package yet. I've successfully compiled libpcap from CVS, but can't get Wireshark (0.99.7) to compile against it. Whenever I run ./

Re: [Wireshark-users] Build problems with Sun's compiler on Solaris 10

2008-02-08 Thread Dr. David Kirkby
Guy Harris wrote: > Dr. David Kirkby wrote: > > >> OK, I'm attaching the part of config.log from the 0.99.7.tar.gz file - >> there are no patches I've applied, nothing from trunk - just the latest >> 'stable' distribution. >> >> I can attack the full config.log if you want, but it is over 200

Re: [Wireshark-users] Query regarding GSM MAP traces analysis

2008-02-08 Thread jehanzeb . khan
Dear All The issue has been resolved after defining the SSN numbers. Alain and Anders, thanks a lot for your help. Regards Jehanzeb - Original Message From: AMEAUME ALAIN <[EMAIL PROTECTED]> To: Community support list for Wireshark Sent: Friday, February 8, 2008 12:55:34 PM Subject: