Wireshark-users: Re: [Wireshark-users] [Ubuntu-Wireshark1.2.2-SIP] I cannot see some packets with

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: ketzal devims <ketzaldevims@xxxxxxxxx>
Date: Mon, 21 Sep 2009 21:54:32 +0200
Hi Stephen, I forgot a question:

Why is there this problem on linux and not on Windows Wireshark version?

Best Regards
Louis

2009/9/21 Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>

On Sep 21, 2009, at 1:14 PM, ketzal devims wrote:

> I’m able to see these packets without filter... Why can’t I see them
> with th filter?
>
> Some friend told me it's a libpcap problem. The libpcap version in
> my computer is 1.0.0-1 (almost the last one)
>
> What's going on??? I really don't understand.

A common cause of this seems to be when you have 802.1q VLAN tags
coming into the machine and being passed up into Wireshark.  If this
is the case, you would need to use "vlan and <your filter>".


Steve

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe