Wireshark-users: Re: [Wireshark-users] Query regarding Wireshark
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 25 Mar 2011 09:46:53 -0700
On Mar 24, 2011, at 9:57 AM, Gurpreet Singh wrote:

> It is not a defect but i couldn't find any forum where I can ask this question.

This is probably a good place to ask this question; another place might be ask.wireshark.org.

> I am monitoring Eth3 of 2 machines. 
> 1st machine is sending the RLP(Radio Link Protocol) messages.
> 2nd machine receives the RLP Messages.
> Data rate would ne 30-40 MBps
> 
> Problem:
> Order of the packet on Machine 2 is not same as Machine 1.
> Is there any guarantee that wireshark will display the packets in the same
> order as the order of the packets on the wire?

Wireshark will, by default, display the packets in the same order that they are delivered to whatever capture mechanism libpcap uses on UN*X and to NDIS (as used by WinPcap) on Windows.  That may, or may not, be the same order of the packets on the wire, especially on multi-core machines.