Re: [Wireshark-users] Setting up a display offset

2007-07-26 Thread Small, James
Bill, I don't believe there is in Wireshark. You have to change the datalink type in the capture file and then setup custom offsets as I described. Did you try this and have any luck? --Jim > -Original Message- > Can anyone follow up with me on this, is there a way to force a offset > s

Re: [Wireshark-users] Setting up a display offset

2007-07-25 Thread Bill Halvorsen (bhalvors)
(bhalvors) Sent: Tuesday, July 24, 2007 12:59 PM To: Community support list for Wireshark; [EMAIL PROTECTED] Subject: Re: [Wireshark-users] Setting up a display offset I agree, I think the sniffer pro force protocol is a handy feature that should be easily introduced into this platform. Where you say I

Re: [Wireshark-users] Setting up a display offset

2007-07-24 Thread Bill Halvorsen (bhalvors)
ly 24, 2007 12:36 PM To: [EMAIL PROTECTED]; Community support list for Wireshark Subject: Re: [Wireshark-users] Setting up a display offset Frank Bulk wrote: > It would be good for the community if this particular case was tackled. > More generically, I've seen a few requests about d

Re: [Wireshark-users] Setting up a display offset

2007-07-24 Thread Guy Harris
Frank Bulk wrote: > It would be good for the community if this particular case was tackled. > More generically, I’ve seen a few requests about decoding captures that > have specific offsets, perhaps this something that needs to be tackled, too. Captures probably don't really have specific "offs

Re: [Wireshark-users] Setting up a display offset

2007-07-24 Thread Luis EG Ontanon
gt; > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Bill Halvorsen (bhalvors) > Sent: Saturday, July 21, 2007 7:26 AM > To: wireshark-users@wireshark.org > Subject: [Wireshark-users] Setting up a display offset > > > > > > I am using a fea

Re: [Wireshark-users] Setting up a display offset

2007-07-24 Thread Frank Bulk
ECTED] On Behalf Of Bill Halvorsen (bhalvors) Sent: Saturday, July 21, 2007 7:26 AM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Setting up a display offset I am using a feature called Cable Intercept on a Cisco CMTS, it packages up traffic between two endpoints into a udp wrappe

Re: [Wireshark-users] Setting up a display offset

2007-07-23 Thread Luis EG Ontanon
On 7/23/07, Small, James <[EMAIL PROTECTED]> wrote: > I would certainly be happy to send you a sample if you'd care to look > but I guess I'm not sure if this would be interesting to the general > Wireshark community. Of course, if you're curious just let me know! That's one of the features of th

Re: [Wireshark-users] Setting up a display offset

2007-07-23 Thread Small, James
IL PROTECTED] [mailto:wireshark-users- > [EMAIL PROTECTED] On Behalf Of Luis EG Ontanon > Sent: Sunday, July 22, 2007 12:55 PM > To: Community support list for Wireshark > Subject: Re: [Wireshark-users] Setting up a display offset > > On 7/22/07, Small, James <[EMAIL PROTECTED]>

Re: [Wireshark-users] Setting up a display offset

2007-07-22 Thread Luis EG Ontanon
On 7/22/07, Small, James <[EMAIL PROTECTED]> wrote: > For the general Wireshark community - is there a way to do the above and > still see the Ethernet frame but ignore the data in the middle? I thought in a way to implement it but I could not find a viable way. The problem is that we cannot kno

Re: [Wireshark-users] Setting up a display offset

2007-07-22 Thread Small, James
2007 8:26 AM To: wireshark-users@wireshark.org Subject: [Wireshark-users] Setting up a display offset I am using a feature called Cable Intercept on a Cisco CMTS, it packages up traffic between two endpoints into a udp wrapper and sends it to a machin where its collected using wireshark,   To view the

[Wireshark-users] Setting up a display offset

2007-07-21 Thread Bill Halvorsen (bhalvors)
I am using a feature called Cable Intercept on a Cisco CMTS, it packages up traffic between two endpoints into a udp wrapper and sends it to a machin where its collected using wireshark, To view the origianl packet I need to setup an offset of 58 bytes to view the original IP packet. How can I