HELP !!! display capture files

[dttng]

Hi,

A client sent me captures files from Sniffer Pro 4.5, and I am using Sniffer Pro 4.70.04 to display the files. 4.70.04 was able to load the files; however, I cannot see the Source and destination IP addresses. The client took the same files and display them on their 4.5, and they can see everything. Does someone know if there is an incompatibility bet. the two ver?

Thanks

 

[AlfSutherland]

Hi,
This shouldn't be a problem as the *.cap format is a standard format for capture files, and Sniffer v4.7 should be back-ward compatable!!

The only time I've seen when it isn't, is when Voice (VOIP)traffic is involved or when theres an un-supported decode!!

Is this the case for you? If not send me the capture and I'll have a look for you.

Alf

 

[mpennac]

Is the trace on the 4.7 machine showing the MAC addresses of the two devices?

You may need to change your display options to show network addressess instead of Data Link addresses. Open the trace and go to the decode window. Right click on the Summary pane, the will be the top one. Select Display Options from the drop down menu. Go to Summary Display and make sure that Display Network Addresses is checked.

I don't have my Sniffer sitting in front of me, so some of the names of the tabs might be slightly different, but that should get you there.

mpennac

http://www.netprospecialists.com

 

[matttheknife]

Hi,
I experienced the same thing once.
Here is what you can do:
- Save the file(s) with .caz extension
This is compressed format and has always worked for me.
OR
- Save Ethernet files as .enc format.
This is the old DOS Sniffer format.

Regards
Matthias