[Wireshark-users] rpm-build

2007-06-19 Thread Cruz, Petagay
hi, I have wireshark-0.99.6-SVN-22073. I compile fine. I want to make an RPM for install. I do 'make rpm-package' and I get the error: error: line 8: Illegal char '-' in version: Version: 0.99.6-SVN-22073 make: *** [rpm-package] Error 1 what to do?? Maria Cruz Associate Booz Allen Hamilton

[Wireshark-users] TShark / Mergecap - Problem converting file type from command line.

2007-06-19 Thread David DuPre
Guy, I am running Wireshark (mergecap.exe) Version 0.99.5 (SVN Rev 20677)on WinXP and I need to automate the conversion of a *.cap file from TCPDump (AIX, and RHat) into Sniffer Pro 2.0 version of the file. Doing this from the GUI seems to work, but when I try this from the command line

[Wireshark-users] Ping not showing up

2007-06-19 Thread someone somewhere
Today, my ISP was having some problems. Before I knew that it was the ISP's fault, I ran wireshark but got some strange results. I only got ARP and DHCP traffic when I was pinging a host with no success (by ip address, not dns name). Why didn't at least the outgoing ping request show up ?

Re: [Wireshark-users] Ping not showing up

2007-06-19 Thread Sake Blok
On Tue, Jun 19, 2007 at 08:41:51PM +0200, someone somewhere wrote: Today, my ISP was having some problems. Before I knew that it was the ISP's fault, I ran wireshark but got some strange results. I only got ARP and DHCP traffic when I was pinging a host with no success (by ip address, not

[Wireshark-users] Editcap 100 argument limitation?

2007-06-19 Thread Rob Campbell
Hi all, Just curious if this is a known issue or something that is out of your control. I noticed that some of the flows in my pcaps have nowhere near the expected number of packets after separating an individual flow using editcap. ie. editcap -r /pub/mypcap.pcap /pub/mysubcap.pcap 1-3 6-7

Re: [Wireshark-users] Editcap 100 argument limitation?

2007-06-19 Thread Sake Blok
On Tue, Jun 19, 2007 at 04:48:15PM -0400, Rob Campbell wrote: Just curious if this is a known issue or something that is out of your control. I noticed that some of the flows in my pcaps have nowhere near the expected number of packets after separating an individual flow using editcap.

Re: [Wireshark-users] Any zLinux users or idears about monitoring zLinux traffic externally?

2007-06-19 Thread Guy Harris
On Jun 19, 2007, at 3:56 PM, Natividad, Joel wrote: If not, any of the devs aware of any possible platform issues, should I venture to compile Wireshark on my own? Not if whatever distribution you're using has an acceptable version of Wireshark available as a binary package. (Red Hat

Re: [Wireshark-users] Any zLinux users or idears about monitoring zLinux traffic externally?

2007-06-19 Thread Stephen Fisher
On Tue, Jun 19, 2007 at 06:56:59PM -0400, Natividad, Joel wrote: Are there any users out there using Wireshark in zLinux (Linux on mainframes - http://en.wikipedia.org/wiki/Linux_on_zSeries)? Not sure. If not, any of the devs aware of any possible platform issues, should I venture to