Re: [Wireshark-users] Using Wireshark for IP fragments reassembling

2007-01-09 Thread Hans Nilsson
Aha. Well maybe exporting the packets and then doing some magic with text2pcap or something like that is possible? On Mon, 8 Jan 2007 23:50:54 -0800, "Guy Harris" <[EMAIL PROTECTED]> said: > > On Jan 8, 2007, at 11:38 PM, Hans Nilsson wrote: > > > It doesn't? I can both export the packet bytes a

Re: [Wireshark-users] Using Wireshark for IP fragments reassembling

2007-01-09 Thread Kaplan, Irine
Yes, Guy understands my question properly. Any original idea how to save reassembled packets? Thanks, Irine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hans Nilsson Sent: Tuesday, January 09, 2007 10:41 To: Community support list for Wireshark Subjec

Re: [Wireshark-users] Using Wireshark for IP fragments reassembling

2007-01-09 Thread Jaap Keuter
Hi, Talk of nitty gritty, there are no reassembled packets, just reassembled IP fragments (if that is the layer the fragmentation occurs). You can get that data from the reassembled message tab under the packet bytes pane. Thanx, Jaap On Tue, 9 Jan 2007, Kaplan, Irine wrote: > > Yes, Guy under

[Wireshark-users] Help on Protocols in frame

2007-01-09 Thread ARAMBULO, Norman R.
Hi, Im using ethereal for capturing IP packets and the platform we used is Linux Enterprise, when we try to display the decode like on the frame it shows the ff. My problem is when we load it in a Sun Solaris platform the Protocols in frame is not present. Can somebody help me with this? What

Re: [Wireshark-users] Help on Protocols in frame

2007-01-09 Thread Gerald Combs
What version are you running on Solaris? You may need to upgrade to a more recent version. ARAMBULO, Norman R. wrote: > Hi, > > Im using ethereal for capturing IP packets and the platform we used is > Linux Enterprise, when we try to display the decode like on the frame it > shows the ff. > >

[Wireshark-users] Help on Protocols in frame

2007-01-09 Thread ARAMBULO, Norman R.
Hi gerald, Well, Im running it on a Solaris9 sparc. Can I use the wireshark instead, but I cant find a stable or an installer for Solaris9 Hope you can help me with this. Thanks "Reality is merely an illusion, albeit a very persistent one."