Hello,
I am using wireshark to read in a .trc file that was generated from a
fileserver (netapp) that generated dump in trc format for analysis.
In some instance i see the following:
[EMAIL PROTECTED]:~/work % /local/wireshark/bin/tshark -r vif1.trc -z
'ip_hosts,tree' -q
tshark: "vif1.trc" appe
dress. When wireshark finds that a packet ( the
last one) is cut short, it doesnt print the stats. Is there a way to have it
continue to print stats.
Thanks
Venkat
Guy Harris <[EMAIL PROTECTED]> wrote: Prashanth wrote:
> I am using wireshark to read in a .trc file that was ge
I did file a report with netapp, but i still wanted to find out about ways of
reading everything else except for the broken packet. Using editcap and
creating a new file worked just like you mentioned. I am able to get the stats
now.
Thanks very much,
venkat
Guy Harris <[EMAIL PROTECTED]> wro
