Ethereal-users: Re: [Ethereal-users] HELP:packets dropped while using Tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 9 Nov 2003 11:51:53 -0800
On Sun, Nov 09, 2003 at 10:17:08AM +0800, Ching Tung Lo wrote:
> To my surprise, I pressed Ctrl+C ,it showed that 862 packets dropped .
> 
> But when I use the command "tethereal -l -V port 53>test",there are no
> packets be dropped in the file of "test". 

Because libpcap format, which is what Ethereal and Tethereal, as well as
tcpdump, use, do not have any way to record in the file the number of
packets that have been dropped.

Ethereal should, instead of saying no packets were dropped when it reads
from a file, say that it doesn't know how many packets were dropped.