Re: [Wireshark-users] mysql statistics

2007-03-12 Thread Guy Harris
Ryan Lovett wrote:

 What does this mean?

It means that there needs to be some way in a Wireshark protocol tree to 
distinguish XXX is a protocol inside YYY from XXX is the next 
instance of a protocol after the YYY instance of that protocol.

Currently, there isn't, so the protocol statistics are bogus for 
protocols that, for example, run over TCP, so that you can have multiple 
packets for the protocol within one TCP segment.

 Is the mysql protocol hierarchy fragmented into minor
 mysql protocols?

No, but, from the point of view of the protocol statistics code in 
Wireshark, it looks that way.
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users


[Wireshark-users] wireshark 0.99.5 OpenBSD port

2007-03-12 Thread Nikns Siankin
Here is OpenBSD 4.0 Wireshark 0.99.5 port:
http://secure.lv/~nikns/stuff/ports/wireshark-0.99.5.tar

SECURITY MEASURES:
If run with root privileges, wireshark, tshark and dumpcap will drop
privileges to unprivileged user _wireshark after opening live capture
device or dump file.
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users


Re: [Wireshark-users] Using multiple files with tshark

2007-03-12 Thread Stephen Fisher
On Thu, Mar 01, 2007 at 12:38:01PM -, McGlinchy, Alistair wrote:

 While you are there, could you cast your eyes over this extension to 
 your fix to allow for the files:value criteria too.  This works but 
 requires multiple uses of the -b flag (rather than the -b and -a 
 flags).
 
   ./tshark  -w ~/test.cap  -b files:3 -b duration:5
 
 Is that what was intended?

Yes, I believe so.


Steve

___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users


Re: [Wireshark-users] Question on InternetPerformanceTroubleshooting

2007-03-12 Thread Mike Savory
But MLPPP can definitely be a source of out of order delivery!

Mike

On Mar 12, 2007, at 5:29 PM, Stephen Fisher wrote:

 On Fri, Mar 02, 2007 at 05:01:09PM -0500, Small, James wrote:

 I believe the 3 T1 are multiplexed using multilink PPP using an  
 Adtran
 router if I remember correctly.

 Is there any way to tell if this PPP bundle is causing out of order
 packets or other issues?

 Not really that I know of. :(

___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users