Re: [Wireshark-users] Comparing packets

2007-06-13 Thread Ed . Staszko
I have found this filter to be useful, in some cases, for removing TCP duplicates. It is not perfect, by any means, but is a quick way to remove most cases of duplicates. The logic is this: Remove the first TCP duplicate acknowledgement and remove any retransmission that takes place in under 5

Re: [Wireshark-users] Comparing packets

2007-06-12 Thread Stephen Fisher
On Wed, May 23, 2007 at 06:14:53PM +0100, Piers Kittel wrote: > So, the computers were run at the same time to capture the packets > going between device A and B. I've got 2 files, like > A-20070522-162040.gz and B-20070522-162040.gz. I've merged the two, > and filtered out the packets I'm no

Re: [Wireshark-users] Comparing packets

2007-05-31 Thread Frank Bulk
Get a copy of 'grep' and 'cut' and all your filtering/stripping problems will be solved. Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Piers Kittel Sent: Wednesday, May 30, 2007 12:29 PM To: wireshark-users@wireshark.org Subject: [Wireshark-users]