Re: [Wireshark-dev] Capture from multiple remote machines

2014-11-17 Thread Roland Knall
Hi There exisyts a new interface in Wireshark, called extcap. It is a plugin interface, which allows you to use self-written programs as capture interfaces. So far the interface is only in main, but if you download any 1.9x version, it should be included. This would allow you to write a program,

Re: [Wireshark-dev] Wireshark may get ISN wrong

2014-11-17 Thread ronnie sahlberg
You can just disable relative sequence numbers in the preferences for tcp. On Mon, Nov 17, 2014 at 9:38 AM, Matt matta...@gmail.com wrote: Hi, I use wireshark to examinate some traces generated by a network simulator (ns3 www.nsnam.org) which set the ISN to 0 (no randomization yet). As

Re: [Wireshark-dev] Capture from multiple remote machines

2014-11-17 Thread Ozan T
Thank you. I will have a look at that. Thanks, Ozan. On Mon, Nov 17, 2014 at 11:38 AM, Roland Knall rkn...@gmail.com wrote: Hi There exisyts a new interface in Wireshark, called extcap. It is a plugin interface, which allows you to use self-written programs as capture interfaces. So far

[Wireshark-dev] Wireshark may get ISN wrong

2014-11-17 Thread Matt
Hi, I use wireshark to examinate some traces generated by a network simulator (ns3 www.nsnam.org) which set the ISN to 0 (no randomization yet). As wireshark assumes base_seq == 0 to be an unitialized value, it triggers some error as wireshark tries to set again and again the base seq. Here is