Wireshark-users: Re: [Wireshark-users] [Ubuntu-Wireshark1.2.2-SIP] I cannot see some packets with
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Mon, 21 Sep 2009 13:44:51 -0600

On Sep 21, 2009, at 1:14 PM, ketzal devims wrote:
I’m able to see these packets without filter... Why can’t I see them with th filter?
Some friend told me it's a libpcap problem. The libpcap version in my computer is 1.0.0-1 (almost the last one) 

What's going on??? I really don't understand.
A common cause of this seems to be when you have 802.1q VLAN tags coming into the machine and being passed up into Wireshark. If this is the case, you would need to use "vlan and <your filter>". 


Steve