Re: [Wireshark-users] Playing trace/capture file in tcpreplay and reading out w/wireshark, using lo0

2006-09-20 Thread Guy Harris
Netfortius wrote: > You're probably right - I do remember having been able to do something > similar > on Linux Linux's loopback device has a link-layer type of Ethernet; the BSD one doesn't. > (not with wireshark There's nothing Wireshark-specific about this; you'd probably see the same proble

Re: [Wireshark-users] Checkpoint interface filter doesn't work

2006-09-20 Thread Boyd Carter
edit--preferences--protocols--ethernet--attempt to interpret as fw monitor make sure you add the monitor if/direction column in your column preferences there are protocol options for FW-1 for the monitor info inserted into the ethernet frame data (fw connection UUID, chain position) -Boyd --

Re: [Wireshark-users] Playing trace/capture file in tcpreplay and reading out w/wireshark, using lo0

2006-09-20 Thread Netfortius
On Wednesday 20 September 2006 21:53, Guy Harris wrote: > Netfortius wrote: > > On a MacOSX, using the latest (0.99.3a) version of wireshark, I am > > attempting to run in one terminal a: > > > > $sudo tcpreplay -i lo0 capture-file.cap (or even -R to speed up the > > process) > > > > while in a wir

Re: [Wireshark-users] Playing trace/capture file in tcpreplay and reading out w/wireshark, using lo0

2006-09-20 Thread Guy Harris
Netfortius wrote: > On a MacOSX, using the latest (0.99.3a) version of wireshark, I am attempting > to run in one terminal a: > > $sudo tcpreplay -i lo0 capture-file.cap (or even -R to speed up the process) > > while in a wireshark *session* reading out of the same lo0 (local interface > on >

[Wireshark-users] Playing trace/capture file in tcpreplay and reading out w/wireshark, using lo0

2006-09-20 Thread Netfortius
On a MacOSX, using the latest (0.99.3a) version of wireshark, I am attempting to run in one terminal a: $sudo tcpreplay -i lo0 capture-file.cap (or even -R to speed up the process) while in a wireshark *session* reading out of the same lo0 (local interface on a MacOSX), but I am getting for all

Re: [Wireshark-users] Installing Wireshark in Fedora Core 5

2006-09-20 Thread Jeff Morriss
Tara Parker wrote: > I am trying to install Wireshark and when I run the .rpm, I get the > following message. I am extremely new at Linux (see drop dead stupid), > and everything I've picked up so far has been on my own. I am not sure > if I need to install all of these dependencies, or if t

Re: [Wireshark-users] Source/Destination display using .../M2UA/MTP3/...

2006-09-20 Thread Jeff Morriss
Michael Lum wrote: > Hello, > > I have snoop traces containing packets with the following stack: > > IP > SCTP > M2UA > MTP3 > TCAP > ANSI MAP > > I have tried a few variations of the source and destination address > types from the column preferences but I cannot get the DPC/OPC > from the MTP

[Wireshark-users] Source/Destination display using .../M2UA/MTP3/...

2006-09-20 Thread Michael Lum
Hello, I have snoop traces containing packets with the following stack: IP SCTP M2UA MTP3 TCAP ANSI MAP I have tried a few variations of the source and destination address types from the column preferences but I cannot get the DPC/OPC from the MTP3 layer to be used instead of IP addresses. Doe

[Wireshark-users] Installing Wireshark in Fedora Core 5

2006-09-20 Thread Tara Parker
I am trying to install Wireshark and when I run the .rpm, I get the following message. I am extremely new at Linux (see drop dead stupid), and everything I've picked up so far has been on my own. I am not sure if I need to install all of these dependencies, or if there is some sort of package