No new packets must arrive between selecting the packet and you clicking on
"Follow TCP Stream". Use a WinPCap filter to reduce the traffic or stop the
capture and use the feature.
As for the delay in loading, it's trying to resolve the DNS for each IP
address in the list. Disable the resolve option and it will load instantly.
Unfortunately Ethereal doesn't allow the setting of default options for that
switch.
--
Gordon McKinney
http://www.night-ray.com/
Mobile: +44 (0)7770 957 627
----- Original Message -----
From: "Hiess Guenther" <g.hiess@xxxxxxx>
To: <ethereal-users@xxxxxxxxxxxx>
Sent: Friday, January 12, 2001 12:56 PM
Subject: [Ethereal-users] "follow TCP stream" feature does not work
Hi,
I have installed ethereal version 0.8.14.1 on a PC running under windows
NT4.0 (Pentium MMX 200 MHz).
I intended to watch a TCP connection (live capture mode)and everything
worked fine at packet level. Of course, it would be much more useful if
I could see the contents of the TCP stream. Unfortunately I always get
an error message that tells me, that I have to select a packet
containing the TCP protocol, before. Because I have selected such a
package, this message is not very useful.
My second question is about speed. I captured about 50 packets in
non-live mode (capture file size about 70kB) and the subsequent reading
of the file took up to 10 seconds. Is this what I can expect at the
system described above?
Regards
Günther Hiess
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
