Ask Your Question
0

displayed packets counter differs between bottom right corner and "File -> Export Specified Packets"

asked 2018-05-17 09:55:31 +0000

Falk gravatar image

updated 2018-05-17 11:29:24 +0000

grahamb gravatar image

Hello,

The counter for the number of packages, that are displayed in the bottom right corner differs from the counter at "File -> Export Specified Packets"

I filtered all retransmitted packages and want to have the total number of the trace.

Can it be that wireshark counts one time all packages and the other time only these with payload?

image description

Best regards, Falk.

edit retag flag offensive close merge delete

Comments

Can you arrange the dialogs to be in close proximity, take a screenshot, crop it down to show only the relevant parts and upload the image?

Also what OS and Wireshark version?

grahamb gravatar imagegrahamb ( 2018-05-17 09:57:46 +0000 )edit

I'm using Windows 10 and Wireshark 2.6.0. I dont know how to upload pictures, so I uploaded the screenshot here: https://ibb.co/gJ6GBJ

Best regards, Falk

Falk gravatar imageFalk ( 2018-05-17 10:25:36 +0000 )edit

I've edited the question with the (cropped) image.

grahamb gravatar imagegrahamb ( 2018-05-17 11:29:47 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-05-17 15:02:40 +0000

cmaynard gravatar image

The reason for the discrepancy is that the status bar is showing the actual number of frames displayed, whereas the "Export Specified Packets" dialog is showing the number of packets that will be exported, based on the displayed packets, but this includes not only the displayed packets, but the dependent frames as well.

For example, if you have fragmented ICMP packets displayed and a display filter of "icmp" applied, and then attempt to export the displayed packets, the number of packets that will be exported will be higher than the displayed number because Wireshark exports the fragments too so that the entire packet can be reassembled in the exported file.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2018-05-17 09:55:31 +0000

Seen: 92 times

Last updated: May 17