Re: [Wireshark-users] Dissector bug, protocol SNMP: STATUS_INTEGER_DIVIDE_BY_ZERO

2007-03-27 Thread Luis Ontanon
Probably an empty password got in its way... We changed many things since release... Can you try a recent bulid from: http://www.wireshark.org/download/automated/ The snmp users table now uses a window copy your data in the new window and try again. On 3/28/07, Luis Ontanon <[EMAIL PROTECT

Re: [Wireshark-users] Dissector bug, protocol SNMP: STATUS_INTEGER_DIVIDE_BY_ZERO

2007-03-27 Thread Luis Ontanon
Do you see the error even if you do not try to decrypt? Is the error inside the decrypted data or before? What's on the tree when the error happens? On 3/26/07, nagendra dhulgond <[EMAIL PROTECTED]> wrote: > > Hi All > > I am using wire-shark latest windows version 0.99.5 . > I wants to decode SNM

Re: [Wireshark-users] Seeing Preamble in Decodes

2007-03-27 Thread Guy Harris
On Mar 23, 2007, at 1:34 PM, Gross, Pete wrote: > I am just wondering why I would start seeing the preamble in some of > the decodes of packets, yet not in all of them? At first I thought > maybe I was transmitting two preambles, but as far as I can tell I > am not. I thought that the har

[Wireshark-users] what happens with SSDP packets which I get only via eth0

2007-03-27 Thread Toralf Förster
Since some days I'm wondering from where I get the ssdp packets attached onto this mail. I sniffed the packets with the command : $>tcpdump -i eth0 -s 0 -w tcpdump_eth0.pcap and examined the file with wireshark. The command $>tcpdump -i ppp0 -s 0 -w tcpdump_pp0.pcap don't gave me those packets.

[Wireshark-users] Dissector bug, protocol SNMP: STATUS_INTEGER_DIVIDE_BY_ZERO

2007-03-27 Thread nagendra dhulgond
Hi All I am using wire-shark latest windows version 0.99.5 . I wants to decode SNMPV3 PDU captured as *.cap file, to decrypt this PDU I am providing USMuserTable file from Edit -> preferences -> protocol -> SNMP. Though I am providing correct keys to decrypt SNMPV3 PDU, I am seeing error "Dis

[Wireshark-users] Seeing Preamble in Decodes

2007-03-27 Thread Gross, Pete
I am just wondering why I would start seeing the preamble in some of the decodes of packets, yet not in all of them? At first I thought maybe I was transmitting two preambles, but as far as I can tell I am not. I thought that the hardware would take care of the preamble and this wouldn't be seen

Re: [Wireshark-users] TCP previous segment lost / connection failure

2007-03-27 Thread ronnie sahlberg
Prior to the "previous segment lost" there is a delay of ~500ms which is a common tcp retransmission timeout. Before this "previous segment lost" segment there were probably an earlier segment twice, once before the 500ms timeout and once immediately together with the "previous segment lost" segme

Re: [Wireshark-users] Please help with difference between packets"lost" and "dropped"

2007-03-27 Thread COHEN, HARVEY S, ATTLABS
RTP packets have sequence numbers. If packets 1, 2, and 5 are in the trace, then packets 3 and 4 are considered lost. Wireshark flags sequence arrival errors. However, packets played out depend on the exact characteristics of the dejitter buffer in the playout device. Wireshark does not model dejit

[Wireshark-users] Please help with difference between packets "lost" and "dropped"

2007-03-27 Thread Adam Harding
Please could someone help me to understand RTP Packet Loss in Wireshark! Does the Packet Loss percentage in RTP analysis mean packets lost in in the network before they reach Wireshark? If so how does Wireshark know they got lost then? How can I differentiate between packets lost due to the net

Re: [Wireshark-users] Dissector for the Lontalk protocol

2007-03-27 Thread Mathias .
Hi Vivek. I would prefer to keep the conversation on this Forum. Thanks for the information.I'm sure you have a good product but beside the fact that Wireshark is a great tool for IP analysis it is also free of charge and open source which, as I think, makes it an extremely powerful tool which I