Revision history [back]

I have been trying to do some general (but in depth) network troubleshooting to find out why all clients on a particular subnet are having trouble reaching a web server. So I simultaneously took PCAP captures on the client and on an intermediary network device. How do I compare the 2 PCAP captures to see if any packets are missing?

When I google my question, I get sent to a URL that contains official-looking documentation: https://documentation.help/Wireshark/ChStatCompareCaptureFiles.html

The above page refers to a "compare" window but no instructions on how to get to this "compare" window. How do I bring up the "compare" dialog box?

I have been trying to do some general (but in depth) network troubleshooting to find out why all clients on a particular subnet are having trouble reaching a web server. So I simultaneously took PCAP captures recently gathered 2 packet traces, one from Wireshark running on the client side and on an intermediary one from a firewall in the network device. How do path, simultaneously in order that I may compare the 2 PCAP captures them to see if whether there was any packets are missing?packet loss. Then I Googled for how to compare PCAP files in Wireshark, and the first "hit" is:

When https://documentation.help/Wireshark/ChStatCompareCaptureFiles.html But how do I google my question, I get sent to a URL that contains official-looking documentation: https://documentation.help/Wireshark/ChStatCompareCaptureFiles.htmlactually bring up the "Compare" dialog box?

The above page refers Note, the above-linked website appears to be a "compare" window but copy of a prior version of the Wireshark documentation; the most recent version of the manual no instructions on how to get to this "compare" window. longer mentions such a feature. How do I bring up Was the "compare" dialog box?feature removed from Wireshark? More generally, it would be very helpful if Wireshark can do a side-by-side comparison of 2 PCAPs of the same transaction taken at 2 different places in the network.

I recently gathered 2 packet traces, one from Wireshark running on the client side and one from a firewall in the network path, simultaneously in order that I may compare them to see whether there was any packet loss. Then I Googled for how to compare PCAP files in Wireshark, and the first "hit" is:

https://documentation.help/Wireshark/ChStatCompareCaptureFiles.html https://documentation.help/Wireshark/ChStatCompareCaptureFiles.html

But how do I actually bring up the "Compare" dialog box?

box? Note, the above-linked website appears to be a copy of a prior version of the Wireshark documentation; the most recent version of the manual no longer mentions such a feature. Was the "compare" feature removed from Wireshark? More generally, it would be very helpful if Wireshark can do a side-by-side comparison of 2 PCAPs of the same transaction taken at 2 different places in the network.