[Ethereal-users] Strange things happen with tethereal -w option (V 0.94) on Win2k

["Tino" <tinngo@xxxxxxxxxxx>]

Basically, I manage to capture one instance (out of 20 or so each day) when
the Web server send a RST during a HTTP session (using a different sniffer)
which results in client getting a "503 service unavailable" error.  I want
to get some more RST to prove that the results is conclusive.


The following ***works*** for sending output to the console (without the -w
option) or to the file test.txt with the -w option.
tethereal -n -t ad -i
\Device\Packet_{9509DFE0-6012-4D5A-BBF7-1B1D5BAC4761} -R "(ip.src eq
203.13.133.164 or ip.src eq 203.13.133.165)" -w d:\test.txt

however, the following only works for sending the output to the console, but
not to the file test.txt with the -w option.
tethereal -n -t ad -i
\Device\Packet_{9509DFE0-6012-4D5A-BBF7-1B1D5BAC4761} -R "(ip.src eq
203.13.133.164 or ip.src eq 203.13.133.165) and tcp.srcport eq 80 and
tcp.flags.reset eq 1" -w d:\test.txt

Thanks in advance for any help - Tino