displayed packets counter differs between bottom right corner and "File -> Export Specified Packets"

asked 2018-05-17 09:55:31 +0000

Falk
3 ●1 ●1 ●2

updated 2018-05-17 11:29:24 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●976 ●227 https://www.wireshark.org

Hello,

The counter for the number of packages, that are displayed in the bottom right corner differs from the counter at "File -> Export Specified Packets"

I filtered all retransmitted packages and want to have the total number of the trace.

Can it be that wireshark counts one time all packages and the other time only these with payload?

image description

Best regards, Falk.

edit retag flag offensive close merge delete

Comments

Can you arrange the dialogs to be in close proximity, take a screenshot, crop it down to show only the relevant parts and upload the image?

Also what OS and Wireshark version?

grahamb ( 2018-05-17 09:57:46 +0000 )edit

I'm using Windows 10 and Wireshark 2.6.0. I dont know how to upload pictures, so I uploaded the screenshot here: https://ibb.co/gJ6GBJ

Best regards, Falk

Falk ( 2018-05-17 10:25:36 +0000 )edit

I've edited the question with the (cropped) image.

grahamb ( 2018-05-17 11:29:47 +0000 )edit

add a comment

answered 2018-05-17 15:02:40 +0000

cmaynard

11115 ●11 ●317 ●165 https://www.igt.com/

The reason for the discrepancy is that the status bar is showing the actual number of frames displayed, whereas the "Export Specified Packets" dialog is showing the number of packets that will be exported, based on the displayed packets, but this includes not only the displayed packets, but the dependent frames as well.

For example, if you have fragmented ICMP packets displayed and a display filter of "icmp" applied, and then attempt to export the displayed packets, the number of packets that will be exported will be higher than the displayed number because Wireshark exports the fragments too so that the entire packet can be reassembled in the exported file.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

displayed packets counter differs between bottom right corner and "File -> Export Specified Packets"

Comments

1 Answer

Your Answer

Question Tools

Stats

Related questions

displayed packets counter differs between bottom right corner and "File -> Export Specified Packets" edit

Comments

1 Answer

Your Answer

Question Tools

Stats

Related questions

displayed packets counter differs between bottom right corner and "File -> Export Specified Packets"