Wireshark-users: Re: [Wireshark-users] UDP playback issue
From: Jean-Baptiste Delpy <jb.delpy@xxxxxxxxx>
Date: Fri, 09 Mar 2012 02:55:58 +0400
I answer to myself.

In fact it was a firewall problem. I did not notice it because I have killed the firewall process to be sure. Now I know it is not the best way. By authorizing properely UDP on the right adresses and network it works better.

So sorry for spamming with a firewall issue.

Now it is still strange because one of the PC cannot send or receive the data from the pcap, where only difference is "IP source", which is not on the same network. However the second PC has no problem with "IP source" from other networks... The only difference between the two network config is in the windows "DNS window" In the window I can't change anything, even in admin, in the DNS setting forced to a specified list of DNS. That may come frome this. But I cannot change this parameter... I will see with sysadmin.


By the way, thanks for the great tool, which wireshark is :).

Sincerelly,
JBD

Le 09/03/2012 01:21, Jean-Baptiste Delpy a écrit :
Hello,

I have recorder UDP traffic (video streaming) with wireshark on a listenning computer. Now I'm trying to play it back on the emitting computer. But this is not working. I've tried it out with both Playcap and "Packet player" but i looks like more a OS (Windows 7) or network configuration issue. However "Packet Player" officially does support Windows 7.

Both UDP Unicast and multicast doesn't work. I've tried without firewall at all and it does not change (and it worked with the firewall when I recorded the data).

If I look to stats in netstat nothing is coming out from the interface. So it is not a router issue.

If I test with IGMP packets records as for ping, it works perfectly. So the problem seems to be only UDP data.

May be my pcap filedoes not include some "initiating packets" that will activate the UDP output on my interface ? Is it normal to have issue only with UDP packets ?

Thanks for your help in advance,

Sincerely,
JBD