Re: [Wireshark-users] Ethereal vs wireshark

2007-07-29 Thread Bill Meier
> > Is it possible to capture all packets as I want? > Please help me out, thanks in advance. > > Please see http://wiki.wireshark.org/Performance for some comments on this issue. Also: I suspect a bit of googling will turn up other relevant notes on this topic. Bill Meier __

Re: [Wireshark-users] Use of WireShark to decode WiMAX MAC Messages

2007-07-29 Thread Ollivier Mont-Reynaud
Thanks Jaap, What we do is like MAC-to-MAC decoding; at least the ethertype was helping us as now the packets are recognized as WiMAX. However, the system is telling us that the TLV are unknown!! How it can look at TLV without identifying the MAC message first? I guess that we still have somethi

Re: [Wireshark-users] Capture filtering using display filters

2007-07-29 Thread Petter Strandmark
That is exactly what I'm after in Wireshark. I just want Wireshark to throw away all packets that don't match a display filter, like the -R option in tshark. Otherwise Wireshark will save a lot of uninteresting packets in memory or in a file, which slows down further searches in the captured da

[Wireshark-users] Ethereal vs wireshark

2007-07-29 Thread winter
Hello, sirs, What kind of tools can capture ethernet packets (such as UDP) fast enough on the Linux platform? Ethereal cannot fulfill my requirements. I'm using packETH 1.4 to send packets. I found that Ethereal cannot monitor all of the packets if I send 10 (or more) packets (100 bytes