This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I installed the latest version of wireshark on vm-windows 8. However, i am capturing using two interfaces. Some of my captures are not displayed based on the arrival time. For example, the SYN/ACK is displayed before the SYN packet. I decided to use reordercap as a solution. Unfortunatly, i tried to use the cmd but it does not seem that reordercap is installed.

I know it suppose to come with wireshark.

asked 07 May '15, 05:52

ahmad_q's gravatar image

ahmad_q
11114
accept rate: 0%


Did you provide the full path to reordercap.exe? On Windows, the Wireshark directory that contains the executables isn't added to the path by the installer.

permanent link

answered 07 May '15, 06:01

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Thank you Sir. Simple answer is the best answer :)

(07 May '15, 15:39) ahmad_q
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×61

question asked: 07 May '15, 05:52

question was seen: 1,111 times

last updated: 07 May '15, 18:18

p​o​w​e​r​e​d by O​S​Q​A