[OT ? ] getting stats out of network capture

[Bob McConnell]

On Behalf Of Norberto Meijome

>On Thu, 24 Jul 2008 17:42:04 -0700
>Chuck Swiger <cswiger at mac.com> wrote:
> 
>> Try something like this on the webserver or client machine:
>> 
>> # tcpdump -ttt -q -n -A tcp port 80
> 
> Excellent, thanks Chuck.
> I haven't got access to the server, and the client has to
> run on a win32 ... so i'll figure out how to tcpdump on w32
> or howto in wireshark gui.

On MS-Windows, the easiest option is to download and install Wireshark
1.0, which will also install Winpcap. It gives you the option of
installing Winpcap as a system service, which enables it for all users,
even the non-admin types.

When you use it, if possible, always tie it to the NIC, not the NDIS
layer. A lot of traffic is sidetracked before it gets to NDIS. In some
cases where the NIC is not supported, we have found that the only
traffic Wireshark can capture is what is left after every other process
has received theirs.

Bob McConnell