["Tom Trenker" <ttrenker@xxxxxxxxxxxxx>]

I would like to use two ethereal sessions to compare some X11 packets
before and after they have passed through a firewall. I think that if I
could hack the print function to print the sequence number from the TCP
header, and then a hex dump of the X11 data from the same packet, I could
then use "diff" to show me what was changed.(I believe the firewall is
dropping bits occasionally) If I use the current print function, the hex
dump shows the whole packet, where there are legitimate changes due to
network address translation, making a "diff" comparison rather useless.

Any suggestions, or pointers?

Thanks, - Tom