Ethereal-users: Re: [Ethereal-users] Comparing Capture Files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Hansang Bae <hbae@xxxxxxxxxx>
Date: Wed, 11 Aug 2004 00:21:10 -0400
On 01:19 PM 8/5/2004, Kelly Sedik wrote:
>I want to compare the capture files from two computers. I've been having a
>problem with a web application that a user at a remote office is trying to
>access. That user's network connects to my network via an isdn connection
>and, through that, has access to the Internet. The remote user cannot use
>this application but a user on my local network can. No filtering is set up
>on my routers. So now I've captured packets from that computer at that
>computer and off the router and I want to see the differences (if any)
>between them. Is there a way to do this? TIA


Reading trace files is still very much an art.  Although the canned display filters in Ethereal is making that easier to do.  But first thing's first. 

Can the end user ping the server?  Can the end user ping the server with 1472 byte packet with the DF bit set?  Are they using a VPN connection?  

hsb