Wireshark mailing list archives
Re: what I witnessed during live capture isn't what is shown by the capture files
From: Andreas <AndreasSander1 () gmx net>
Date: Thu, 03 Mar 2011 08:42:24 +0100
Am 03.03.2011 08:23, schrieb Jaap Keuter:
Hi, AFAIK this could only be happening when Wireshark gets out of whack when reading your capture file, while the capture is running. That is why you can read the all right afterwards. I assume the changeover between the two 'states' happens with the changeover in capture file. OF course this is not supposed to happen, but there are some intricate interactions going on in ring buffer mode. A report of this at bugs.wireshark.org would be appreciated.
Probably screenshots may help to document this, when it occurs again. -- Andy ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- what I witnessed during live capture isn't what is shown by the capture files Larry Dieterich (Mar 02)
- Re: what I witnessed during live capture isn't what is shown by the capture files Jaap Keuter (Mar 02)
- Re: what I witnessed during live capture isn't what is shown by the capture files Andreas (Mar 02)
- Re: what I witnessed during live capture isn't what is shown by the capture files Bill Meier (Mar 03)
- Re: what I witnessed during live capture isn't what is shown by the capture files Jaap Keuter (Mar 02)