<?xml version="1.0" encoding="UTF-8"?>
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns="http://purl.org/rss/1.0/" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:syn="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/">
  <channel rdf:about="http://blog.gmane.org/gmane.network.wireshark.user">
    <title>gmane.network.wireshark.user</title>
    <link>http://blog.gmane.org/gmane.network.wireshark.user</link>
    <description/>
    <syn:updatePeriod>hourly</syn:updatePeriod>
    <syn:updateFrequency>1</syn:updateFrequency>
    <syn:updateBase>1901-01-01T00:00+00:00</syn:updateBase>
    <items>
      <rdf:Seq>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6162"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6161"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6160"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6152"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6151"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6148"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6140"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6138"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6136"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6134"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6127"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6126"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6121"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6118"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6117"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6115"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6111"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6046"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6045"/>
        <rdf:li rdf:resource="http://comments.gmane.org/gmane.network.wireshark.user/6028"/>
      </rdf:Seq>
    </items>
    <image rdf:resource="http://gmane.org/img/gmane-25t.png"/>
    <textinput rdf:resource=""/>
  </channel>
  <image rdf:about="http://gmane.org/img/gmane-25t.png">
    <title>Gmane</title>
    <url>http://gmane.org/img/gmane-25t.png</url>
    <link>http://gmane.org</link>
  </image>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6162">
    <title>TCP Port numbers reused</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6162</link>
    <description></description>
    <dc:creator>Kenneth Bergholm</dc:creator>
    <dc:date>2008-08-29T10:00:01</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6161">
    <title>Wireshark problem</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6161</link>
    <description>Hi

I can capture on the interface with WinDump, but when I try with 
Wireshark appears a problem about a driver that I don't know what it is.

    * the operating system you're using, and the version of that
      operating system: I'm using Windows Vista Home Premium SP1
    * the type of network device you're using: I'm connected right now
      by wi-fi, so i'm using the wireless card.
    * the error message I get from Wireshark: "The NPF driver isn't
      running.  You may have trouble capturing or listing interfaces" It
      appears specifically when I open the Wireshark app.

Thanks for your answer


Ricardo A Corredor J
Universidad de los Andes
Colombia
Bogota
</description>
    <dc:creator>Ricardo A Corredor</dc:creator>
    <dc:date>2008-08-29T04:06:34</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6160">
    <title>SSCOP Special Encapsulation DLT User Selection?</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6160</link>
    <description/>
    <dc:creator>David Bryant</dc:creator>
    <dc:date>2008-08-28T20:56:58</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6152">
    <title>Traffic bewteen two IP addresses</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6152</link>
    <description/>
    <dc:creator>Bryan Carter</dc:creator>
    <dc:date>2008-08-28T21:21:55</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6151">
    <title>Question on databases</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6151</link>
    <description/>
    <dc:creator>Terry Martin</dc:creator>
    <dc:date>2008-08-28T21:32:07</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6148">
    <title>loading user specified decodes</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6148</link>
    <description>How do I load "user specified decodes" table when starting wireshark?
Tshark has "-d udp.port==&lt;port&gt;,&lt;proto&gt;" option. Is there any equivalent in wireshark?
A lua script can be started automaticly... Does lua script have access to load this table?

Zoran
</description>
    <dc:creator>Zoran Bošnjak</dc:creator>
    <dc:date>2008-08-28T08:56:14</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6140">
    <title>Question</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6140</link>
    <description/>
    <dc:creator>Terry Martin</dc:creator>
    <dc:date>2008-08-28T15:45:39</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6138">
    <title>Filter out two MAC addresses help</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6138</link>
    <description>Hi All,
I am struggling with how to take a Wireshark packet capture and filter out two (or more) MAC addresses.  
I can filter out one MAC address using
!(eth.src == 00:01:12:23:34:45)

But I cannot write the correct filter to remove a second MAC.  Read CHM Windows help and googled.  To no avail.  

THOUGHT I could filter out two MACs with similar

!(eth.src == 00:00:00:00:00:00:11:11:11:11:11:11)

or

!(eth.src == 00:00:00:00:00:00) || !(eth.src == 11:11:11:11:11:11)

I believe you can filter out two or more MAC addresses. But I lack the knowledge to do this.  lol  Has anyone written this filter? Reference?
ANY help is appreciated.

lt

------Original Message------
From: &lt;wireshark-users-request-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org&gt;
To: &lt;linuxtard-/E1597aS9LQAvxtiuMwx3w&lt; at &gt;public.gmane.org&gt;
Date: Thu, Aug 28, 2008 05:32 AM
Subject: Welcome to the "Wireshark-users" mailing list

Welcome to the Wireshark-users-IZ8446WsY0/dtAWm4Da02A&lt; at &gt;public.gmane.org mailing list!

To post to this list, send your email to:

  </description>
    <dc:creator>Linux Tard</dc:creator>
    <dc:date>2008-08-28T13:07:12</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6136">
    <title>which protocol for workgroups?</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6136</link>
    <description>
I'm hoping Wireshark can help me solve a problem with Windows workgroups.
Which of the 900+ protocols do I select to watch a workgroup form?
Is the protocol for workgroups documented anywhere?
Thanks.

</description>
    <dc:creator>Chuck Bradley</dc:creator>
    <dc:date>2008-08-27T23:40:23</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6134">
    <title>Database Protocol support</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6134</link>
    <description/>
    <dc:creator>Al Aghili</dc:creator>
    <dc:date>2008-08-27T19:14:07</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6127">
    <title>GTP extension header decoded?</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6127</link>
    <description/>
    <dc:creator>Lin, Murong (NSN - CN/Guangzhou</dc:creator>
    <dc:date>2008-08-27T08:11:23</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6126">
    <title>Sample CAMEL SMS trace</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6126</link>
    <description>Hello to everyone. Does anyone have a sample trace of a CAMEL SMS transaction.
I need to confirm some fields, so i was hoping to check it with a sample trace.

Thank you in advance;
Jay



      
</description>
    <dc:creator>jay_flora-/E1597aS9LQAvxtiuMwx3w&lt; at &gt;public.gmane.org</dc:creator>
    <dc:date>2008-08-27T01:54:55</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6121">
    <title>Noob OS X question</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6121</link>
    <description>OK,
SO I have X11 installed and did all the stuff in the readme file, and  
have tried 'sudo wireshark' yet no matter how i launch it,
being from the app icon or from the command line, I get nada but a  
bouncing icon and a 'wireshark' menu with no window.
I'm sure you've heard this before :)
Help!
</description>
    <dc:creator>Christian MacNevin</dc:creator>
    <dc:date>2008-08-26T17:26:58</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6118">
    <title>TCP Previous Segment Lost</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6118</link>
    <description>I have a hand-held device which has a built-in http web server and an
Ethernet port. To turn this device into a true portable system, I
added a wifi bridge and then associate it with our corporate 11b
network.

I am able to ping the hand-held device from my desktop via the WLAN.
However, when I try to browse it using the IE browser, it returns with
a time-out failure. I captured the network traffic using wireshark
from the desktop and found that. Actually the client desktop was able
to initialize the handshake with the web server.

(4291) client to server: TCP src port 3253, dst port 80, [SYN] seq=0
win=64240 len=0 MSS=1460 WS=0
(4292) server to client: TCP src port 80, dst port 3253, [SYN, ACK]
seq=0 ack=1 win=5000 len=0 MSS=1460
(4293) client to server: TCP src port 3253, dst port 80, [ACK] seq=1
ack=1 win=64240 len=0
(4294) client to server: HTTP src port 3253, dst port 80, [GET / HTTP/1.1]
(4295) server to client: TCP src port 80, dst port 3253 [ACK] seq=1
ack=258 win=4775 len=0

Everything is ok until t</description>
    <dc:creator>Johnny Chan</dc:creator>
    <dc:date>2008-08-26T00:28:25</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6117">
    <title>Pb?, Max Delta, Max Jitter,Mean Jitter colums in wireshark's RTP stream analysis</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6117</link>
    <description/>
    <dc:creator>gdonts</dc:creator>
    <dc:date>2008-08-26T13:34:50</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6115">
    <title>pcap to text</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6115</link>
    <description/>
    <dc:creator>Martin Corraine (mcorrain</dc:creator>
    <dc:date>2008-08-25T21:51:05</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6111">
    <title>Re : Problem with Installation on Solaris 10 :"invalid argument"</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6111</link>
    <description/>
    <dc:creator>Bertrand Rastello</dc:creator>
    <dc:date>2008-08-25T20:25:47</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6046">
    <title>How to see DSCP/ToS fields in tshark?</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6046</link>
    <description/>
    <dc:creator>Aleksej Alekseev</dc:creator>
    <dc:date>2008-08-24T11:16:48</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6045">
    <title>Need help to decode iSCSI PDUs</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6045</link>
    <description/>
    <dc:creator>Karthikselvan Sachithanandam</dc:creator>
    <dc:date>2008-08-23T21:33:17</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6028">
    <title>SNMP mibs and WireShark 1.0.2</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6028</link>
    <description/>
    <dc:creator>Glenn Andrews</dc:creator>
    <dc:date>2008-08-22T17:02:35</dc:date>
  </item>
  <item rdf:about="http://comments.gmane.org/gmane.network.wireshark.user/6026">
    <title>Problem with Installation on Solaris 10 :"invalid argument"</title>
    <link>http://comments.gmane.org/gmane.network.wireshark.user/6026</link>
    <description/>
    <dc:creator>Bertrand Rastello</dc:creator>
    <dc:date>2008-08-22T09:05:35</dc:date>
  </item>
  <textinput rdf:about="http://search.gmane.org/?group=$group=gmane.network.wireshark.user">
    <title>Search Engine</title>
    <description>Search the mailing list at Gmane</description>
    <name>query</name>
    <link>http://search.gmane.org/?group=$group=gmane.network.wireshark.user</link>
  </textinput>
</rdf:RDF>
