Ethereal-users: Re: [Ethereal-users] Expert Mode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 12 Mar 2004 01:01:53 -0800
On Thu, Mar 11, 2004 at 08:07:53PM -0800, Bill Hecox wrote:
> Someone sent me a cap file today. We were reviewing the file
> and he said see the additional information in the info field.
> 
> He had something like duplicate packet or similar info.
> I did not see this in my info field.
> 
> Is there an expert mode similar to SNIFFER?

No.

The TCP dissector has *some* capabilities along those lines.

> How do I activate this feature?

You can activate the TCP feature by selecting "Preferences" from the
"Edit" menu, opening up the "Protocols" list in the Preferences dialog
box, selecting TCP, turning on "Analyze TCP sequence numbers", clicking
"Save" if you want that to be the default, and clicking "OK".

That would detect TCP retransmissions, but it won't do anything for
other protocols.