Wireshark · Ethereal-users: RE: [Ethereal-users] Is it possible to supress ICQ: Unknown versionmessage?

["Niklas Abrahamsson (KI/EAB)" <niklas.abrahamsson@xxxxxxxxxxxx>]

Title: Is it possible to supress ICQ: Unknown version message?

Does anyone have a clue to if and how this could be done? I have tried looking all over but can't seem to find anything that works.

 

I've searched around and found this:

http://www.ethereal.com/lists/ethereal-dev/200408/msg00142.html

 

"The reason is that the ICQ dissector prints a message to the standard
error if it dissects a packet that doesn't have an ICQ version number it
knows about.  This can happen if non-ICQ UDP traffic to or from port
4000 is in a capture."

 

Which explains why I keep getting the message all the time.

The program I have calls on tethereal to ouput the whole tcpdump-file with "-V" so that I easily can get the information I want. But tethereal still prints out the error message on the screen. I would rather that it output it to the program or even better not output it at all. As it is now my program is slowed down alot by these error messages.

 

Any input would be helpful.

 

Thanks,

 

Nicklas

---

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Niklas Abrahamsson (KI/EAB)
Sent: den 31 oktober 2005 11:44
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Is it possible to supress ICQ: Unknown versionmessage?

When i go though my dump-files I keep getting a list of ICQ: Unknown version messages which I assume is because of me having cut the dump to the first 100bytes of every packet. Is it possible to not have this message appear in tethereal att all?

I'm working on a simple program to sift though my dump-files for specific information with the help of tethereal and these error messages are not that fun to deal with since they show up no matter what I do.