Re: Analyzing tcpdump file differs from OSX to Windows

[Martin Visser <martinvisser99 () gmail com>]

How different is different? One of you may have tweaked configuration
options which can change the way packet information is displayed. Even
simple things like whether you both have name resolution configured, but
only one is connected to the DNS might change what is displayed.

If you provide a sample of both (either a screenshot) or print to file, we
might be able to provide more objective assistance.

Regards, Martin

MartinVisser99 () gmail com


On Wed, Sep 29, 2010 at 10:45 AM, jACK cRASH <jackcrash.ficc () gmail com>wrote:

> We both downloaded it last week I am not sure if they are perfectly
> identical, however, we did check that and the first 3-4 digits matched.
>
> -Jack
>
> On Sep 28, 2010, at 6:42 PM, Guy Harris wrote:
>
> > On Sep 28, 2010, at 5:38 PM, jACK cRASH wrote:
> >
> > > He is using Windows XP wireshark and I am using Snow Leopard Wireshark
> and today we were looking at the same file and wireshark was displaying the
> information for a pack differently between the two OSs, the time stamp was
> the same and the binary info at the bottom was the same.
> > Are you running the same version of Wireshark?
> ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org
> >
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe