Ethereal-users: [Ethereal-users] Re: Viewing 64bit counters in an ethereal capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "ronnie sahlberg" <ronniesahlberg@xxxxxxxxx>
Date: Wed, 28 Jun 2006 20:31:59 +0000
please try the latest version of wireshark.

there has been fixes in wireshark for 64 bit integers/counters.



On 6/28/06, Dhanak, Vipul (Vip) <vip@xxxxxxxxxx> wrote:
I'm currently using Ethereal 0.10.14 to try and  capture some SNMP traffic
from a Cisco 7x00 switch for analysis.  I'm primarily interested in the
stats reported in the ifXentry table (1.3.6.1.2.1.31.1.1.1) table which
contains 64bit counters.

The capture appears to happen as expected but the results I see in the
output of the snmpget command is different than the value shown in Ethereal.
 For example, during one of the polls the value shown from snmpget was
(counter64) 2934035119 whereas Ethereal shows Value: Counter64:
15195617933287765935.

Subsequent snmpget's of the counter show increasing values in my snmpget
tool whereas the values seen within Ethereal don't seem to show this
pattern, and often go down before going up during the next poll.

Is this the expected behavior ?  i.e. do I need to do some conversion to the
value shown in Ethereal in order to get the correct result ?  I've tried
reverting back to older versions of Ethereal but the results remain the
same.

Any help with troubleshooting (or explaining this behavior) would be much
appreciated.

Regards.

Vip.

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users