[Wireshark-users] Encrypted alert in SSL session

Classification: NATO UNCLASSIFIED Hi all, Can anybody help me what the following error means in dump of SSL session? (normal ssl session setup.) Ssl clientSSL Server TLS Change Cipher Spec, encrypted handshake message SSl serverSSL Client TLS encrypted

Re: [Wireshark-users] wireshark without x server

It s not an option of wireshark, The CLI program is called tshark On 3/5/07, Luca Rossi [EMAIL PROTECTED] wrote: Hi all, is possible to use wireshark without a server X (in command line only) If yes what paramera i must settings? Now when I try to use a wireshark i receved thi error:

Re: [Wireshark-users] wireshark without x server

Hi, you can capture traffic into a file with /tethereal / e.g.: tethereal -i eth0 -w filename.pcap hope this helps. ./regards stephan Luca Rossi wrote: Hi all, is possible to use wireshark without a server X (in command line only) If yes what paramera i must settings? Now when I try to use a

Re: [Wireshark-users] wireshark without x server

Luca Rossi wrote: Hi all, is possible to use wireshark without a server X (in command line only) If yes what paramera i must settings? Now when I try to use a wireshark i receved thi error: (wireshark:21755): Gtk-WARNING **: cannot open display: Try TShark:

[Wireshark-users] bandwidth measurement

Hey folks, does anyone have any ideas on this one? I have two primary applications, Lotus Notes and JD Edwards, and several others. I would like to measure the bandwidth of each. How would I do it? ___ Wireshark-users mailing list

[Wireshark-users] Display Filter for multiple IP's?

Hello, This may have been asked before, so apologies if it is a repeat. If I want to filter OUT 1 IP from a Wireshark Capture, I can use the expression: ! ( ip.addr == 10.0.0.1) However, I would like to filter out multiple IP's from the capture file. I thought doing it like so would work:

Re: [Wireshark-users] Display Filter for multiple IP's?

! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 ) On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote: Hello, This may have been asked before, so apologies if it is a repeat. If I want to filter OUT 1 IP from a Wireshark Capture, I can use the expression: ! ( ip.addr ==

Re: [Wireshark-users] RTCP: Calculate round trip delay (Bishwarup)

Make sure to read the RFC 3550. The values are not always strictly binary. For instance, NTP is sec/millisecs. The value of DLSR is represented as 1/65536 of a sec ticks. gerry ___ Wireshark-users mailing list Wireshark-users@wireshark.org

Re: [Wireshark-users] Display Filter for multiple IP's?

Thank you! Worked like a champ! Luis Ontanon wrote: ! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 ) On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote: Hello, This may have been asked before, so apologies if it is a repeat. If I want to filter OUT 1 IP from a

Re: [Wireshark-users] Display Filter for multiple IP's?

On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote: Thank you! Worked like a champ! It was a *logical* think for it to work. :-) Luis Ontanon wrote: ! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 ) On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote: Hello,

Re: [Wireshark-users] Display Filter for multiple IP's?

Luis Ontanon wrote: ! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 ) Which any worker in symbolic logic will tell you is the same as: !(ip.addr == 10.1.1.1) and !(ip.addr == 10.2.2.2) and !(ip.addr == 10.3.3.3 ) So the OP could have just swapped or for and. -- There's

[Wireshark-users] Wireshark on OSX **NEWBIE**

Ok, here goes nothing.. I have been using Ethereal on OS X. It has a nice gui and everyhting. I cannot for the life of me find where Wireshark has been installed. Where is the nice program in the applications list like Ethereal? Be kind... : ___