Strange Wireshark Capture XR Span

Good afternoon. I am working on Inter-op with a brocade CER and an ASR 9001 and I am running into an issue getting ISIS adjacency up. I was able to solve this on our other systems by paying close attention to wireshark captures of the authentication of Hello and LSP adjacency.
However, when mirroring on the XR, I am getting some strange output. Here is my config:
monitor-session BROCADE ethernet
destination interface GigabitEthernet0/0/0/2
interface GigabitEthernet0/0/0/10
description UPLINK TO BOTTOM BROCADE ETHERNET 2
ipv4 address 10.9.0.94 255.255.255.252
monitor-session BROCADE ethernet
negotiation auto
Here is a screenshot of the packet capture:
http://goo.gl/7xDLxw

Here is the brocade side:
router isis
net 49.0002.0100.0900.0200.00
auth-mode cleartext level-2
auth-key "********" level-2
bfd all-interfaces
log adjacency
log invalid-lsp-packets
set-overload-bit on-startup 30
address-family ipv4 unicast
default-metric 200
metric-style wide
exit-address-family
address-family ipv6 unicast
exit-address-family
interface ethernet 1/2
port-name P2P to West 9001
enable
route-only
ip router isis
ip address 10.9.0.93/30
isis auth-mode cleartext
isis auth-key "********"
isis circuit-type level-2
isis ipv6 metric 200
isis metric 200
isis point-to-point
Here is the Cisco side:
router isis lab
set-overload-bit on-startup 30
net 49.0002.0100.0900.0197.00
nsf ietf
lsp-gen-interval maximum-wait 30000 initial-wait 30000 secondary-wait 30000
lsp-password text encrypted 130232020F3901130F1D0C356205373D11362B425A level 2
address-family ipv4 unicast
metric-style wide
metric 16000000
ispf
default-information originate
address-family ipv6 unicast
metric-style wide
metric 16000000
interface Loopback0
passive
circuit-type level-2-only
address-family ipv4 unicast
   metric 200
interface GigabitEthernet0/0/0/10
circuit-type level-2-only
point-to-point
hello-password text encrypted 121E2007163E093D0E12002E641206290023291555
address-family ipv4 unicast
   metric 200
I have not disabled ISIS authentication because although it is a lab others are working in it and would interrupt some of what they are doing.
So far in the wireshark it looks like I can see hellos from the Cisco, but not from the brocade. Perhaps I am on the wrong support forums? :)

Similar Messages

Cisco 4500X Wireshark capture to usb not working

Hi, I am Ashley and i am testing the Cisco 4500X using wireshark capture. advanced ip services IOS.
The capture runs fine when storing the wireshark file on the bootflash. No worries.
But when i configure the destination as USB0 my pendrive, it fails.
The usb device is fine and is writable. I tested it by copying from bootflash to usb0:
Followed the instructions in the config guide.
It still fails.
Can someone please help.
Thanks,

But when i configure the destination as USB0 my pendrive, it fails.
Could be a bug but I wouldn't recommend configuring the destination as your USB drive because no one has the same luxury as you to have the USB sit there all the time.
Store to the flash and transfer to USB is probably the best solution.

Help with TCP out-of-order packets Wireshark capture

Hello everyone, we have a bit of an odd issue. Can you take a look at the attached capture file and tell me what's broken? Please change the file extension from .txt to .pcapng and open with Wireshark.
We have a major issue where clients cannot retrieve data from the server at 10.10.7.27.
Server is behind the firewall at 172.18.123.4 which is configured to NAT the traffic coming through.
Please advise.

It's actually from anywhere. The DNS resolves the website address to a global address. So regardless of the source (inside or out), you hit the firewall and get routed to 10.10.7.0 network. The firewall's LAN interface shares the same VLAN as the DMVPN head-end router's LAN interface. From the DMVPN head-end router, it goes over the DMVPN cloud (i.e. back over the internet) to our office in Florida where this site is being hosted.
The capture I grabbed was by SPAN port between the two LAN interfaces showing transactions between the firewall's LAN interface and the server's IP address on the 10.10.7.0 subnet.
Site uses HTTPS and we have other servers in the same subnet (10.10.7.0) that are accessible in the same manner. I did SPAN the ports for another webserver and did see a lot of TCP OOO and re-transmissions however not as bad as this one.
I do have a theory, please feel free to correct me. Request comes in on the WAN interface, gets NATed by the firewall and sent to the DMVPN router, router encrypts the packet and places it on the wire, once the remote DMVPN peer receives the packet, it decrypts it and then sends it out it's DMZ interface connected to another application firewall. This firewall checks the packet and then sends it to the web server hosting the content. The process is reversed for reply traffic. On top of all this, the content is served over HTTPS therefore more encryption/decryption. This seems like too much handling of the packet to me? When the source computer sends a request, it simply times out or spends too much time within our own network causing the source to resend the request?

[SOLVED] wireshark - capturing a traffic as a non-root user

Hi,
I want to capture a traffic as a non-root user using a wireshark
I'm a member both of wireshark and network groups.
In spite of that I get the following error message:
The capture session could not be initiated on interface 'enp0s25' (You don't have permission to capture on that device).
Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.
The interface enp0s25 exists in my system.
What else should I do.
thanks for help
Last edited by jaro (2014-11-10 16:31:45)

open terminal as regular user and type
$ groups
check if it prints out those 2 groups. Then if it doesn't, try this:
$ sudo su
# usermod -aG additional_groups username
and then reboot pc.
If still doesn't - Am out of ideas. Try to run it as root. If you don't want to always type "sudo wireshark" just follow these steps:
Step 0. Be happy
Step 1. Edit /etc/sudoers file as root
Step 2. Put this line into that file:
<your_username> ALL = NOPASSWD: /usr/bin/wireshark
and save
Step 3. Change your launcher, menu or whatever from "wireshark" to "sudo wireshark" (or gksudo/kdesu instead of sudo, if needed).
Step 4. Have a break. Thats it.
I also checked arch wiki about permissions - have no idea what could be wrong. Try my steps, it might help you.

Wireshark capture on access port displays different vlan traffic

Hi Guys,
i have a nexus 4001i Blade Center Switch where i have a server connected in mode access to a particular vlan.
when i use wireshark on this port, i see different traffic conversations of different servers in different vlans which seems strange to me.
anybody have an idea why a server in mode access with wireshark is able to view different vlan traffic? I also see non multicast and non broadcast converations.
the port the server is connected to is not a monitor port but only in switch port mode access.
thanks in advance for you feedback

Hi,
So it looks like you're getting unicast traffic flooded to all ports. There are a couple of reasons I've come across that can cause this.
Asymmetric routing: See Unicast Flooding in Switched Campus Networks and/or Case Study #8: Asymmetric Routing and HSRP (Excessive Flooding of Unicast Traffic in Network with Routers That Run HSRP) for details of why it happens and how to prevent it.
Microsoft Network Load Balancing. As per the Microsoft Troubleshooting NLB:
In unicast mode (the default Forefront TMG cluster operation mode) NLB induces switch flooding, by design, relaying packets sent to the VIP addresses to all cluster hosts. Switch flooding is part of the NLB strategy for obtaining the best throughput for any specific load of client requests. However, if the NLB interfaces share the switch with other (non-cluster) computers, switch flooding can add to the other computers' network overhead by including them in the flooding and consequently have a detrimental effect on network and/or server performance.
Regards

Is it possible to deliver captured traffic (span) to a server in ESX (VMware)?

Hi Guys,
I have a request to capture traffic on the LAN and deliver it to a virtual server in a ESX VMware enviroment.
Has anyone tried this?
The topology is this:
WAN--Gateway--LAN--6500s--portchannel---Server with ESX (virtual server)
Data coming from the WAN entering the LAN on a specific port, needs to be captured, and sent to a specific virtual server.
Do you think this is possible?
Thanks.
Adrian

If you put the ESX servers VMNIC port as destination it should be possible. You need to configure SPAN in Vmware though to send it to specific virtual machine. See if this link helps:
http://blogs.vmware.com/vsphere/2013/02/vsphere-5-1-vds-feature-enhancements-port-mirroring-part-3.html
Daniel Dib
CCIE #37149

Wireshark capture rtp packets on Cisco CUBE.

Hello all,
We have this call flow and we are having intermittent DTMF issue
CUCM 10.5--->CUBE(10.1.1.10--->AVAYA(10.1.1.11)--->PSTN
I am trying to capture RTP packets between CUBE and AVAYA, How can we capture RTP packets between(10.1.1.10 and 10.1.1.11)??
I followed below steps and I can see the traffic only from AVAYA to CUBE and that too only SIP and TCP not RTP.
Router(config)# access-list 140 permit ip host 32.55.55.32 any
Router(config)# access-list 140 permit ip any host 32.55.55.32
This ACL will capture all traffic to and from this IP address.
Next we need to enable the Cisco packet monitoring service:
Router# monitor capture buffer holdpackets
Now we can filter the monitored traffic by filtering it through our access-list:
Router# monitor capture buffer holdpackets filter access-list 140
Now we need to name our particular packet capture. I have called mine "testcap"
Router# monitor capture point ip cef testcap all both
Router# monitor capture point associate testcap holdpackets
Now we can start our capture!
Router# monitor capture point start testcap
Once you think you have acquired enough packets, to stop the capture, type:
Router# monitor capture point stop testcap
Now you can export your data to your tftp server by typing in the following command. You can then open the .pcap file in Wireshark for viewing
Router# monitor capture buffer holdpackets export tftp://10.0.0.55/testcap.pcap
Once uploaded you can clear your capture buffer by typing the following:
Router# no monitor capture buffer holdpackets
Any help is much appreciated
Thanks!

But when i configure the destination as USB0 my pendrive, it fails.
Could be a bug but I wouldn't recommend configuring the destination as your USB drive because no one has the same luxury as you to have the USB sit there all the time.
Store to the flash and transfer to USB is probably the best solution.

Strange Problem capturing with Apple Intermediate Codec

We have the following problem:
We capture with a blackmagic decklink studio card (but I could reproduce the same problem using a MacBook Pro and the internal camera) with a MacPro and CS4. When capturing a live video feed (1280x720) with the apple intermediate codec (set to 29.97fps or to 59.94fps) everything seems to work just fine. But the resulting videoclips happen to be exactly ONE half of the total capture time. So if we capture in Premiere for about 1 our the clip is only 30 minutes long. If we capture for 10 sec., the clip will be 5 sec. long. It's not that the captured clips play with double the framerate. Half of the actual footage is missing.
Any suggestions?
By the way: we live in a PAL50Hz country, but our video signal that needs to be recorded comes in as a 60hz signal.

Hi,
Well I did some googling...and I would bet that the problem is the 50hz vs 60hz...
Unfortunately most if not all info I got that even BRUSHES on this subject with the sort of material you're dealing with is the opposite....where they are in 60cycle land with pal stuff....rather than in pal land dealing with 60hz ...
This is a lot of misc stuff but if you get a little bit of info from various posts and make some notes you might be able to get an idea how to solve the problem...
In particular I was looking at how frames are flagged and new frames are created later ...( toward very end of these posts - the last four or so )
Also noted some timecode reading that was "doubled"....so if your deck thought you had a specific length and then it read the timecode doubled, it would be your problem in a nutshell... have you checked the last frame you captured and compare that timecode to the overall length ??
anyway, here is a TON of stuff to breeze through...good luck...
THIS IS EDIUS RELATED..so keep in mind re: specific presets etc
Steve Sherrick
03-03-2008, 11:14 AM
Hi chaps,
Can I just confirm that the SDI/HDMI outputs are only live in build 14? I'm on 13 and going SDI - HDLINK - DELL24" gives me nothing. I'm in PAL land so have tried switching between 50hz and 59hz in camera.
So do I need build 14 or is it something else?
Cheers
Jeff Brown
#708
I'm in NTSC land but that same setup gives me picture just fine. Which Dell model is it? Is everything set up right from the camera side?
Jeff Brown
03-04-2008, 12:42 PM
Hi Steve,
I believe so. Set to Preview in th viewfinder settings, plugged in on preview mini sdi, cam set to 50hz..
Anything I'm missing?
Cheers
To counter this, the AJ-HD1400 offers two modes specifically for this called '25(SD)' and '25(HD)'. They output the 25fps signal with new timecode on a 50Hz carrier (only over SDI/Analogue the Firewire doesn't work in that mode).
It only works with 25fps material too, any other 'offspeed' rate has to be dealt with separately with the deck operating in 59/60 mode.
When operating in either of these 25 modes, the deck generates new 25fps timecode from the tape (although our tests have indicated that it is frame accurate of multiple playback passes).
Basically, Varicam, while a very nice idea, has only ever been properly designed to work in a 60Hz environment. It is pretty much a nightmare in 50Hz environments.
I think I may have found the cause of the problem.
For some reason when I started my project it had a Device Control profile set to 720p50 (rather than the 1080i50 that the deck is operating in).
What this seems to have done is double the frame number on any clip it encountered. So if I took a clip with in marked at 01:02:40:22 and dropped it in the Log and Capture tool the In Point that FCP decided to look for was 01:02:40:44 (which isn't going to exist on a 25fps timecode obviously).
Since you are using Pal
Go :
Generic OHCI HD 50hz -> 960x720 25p over 60p
Because if I am right you can't do Pal over 60hz but you can do PAL over 60P at 50hz.
( but I could be wrong)
But the other problem is that you are using an ntsc profile to capture pal recorded footage.
50 hz 960x720 over 60P yields a frame rate of 25 progressive
60 hz 960x720 59.94p yields a frame rate of 59.94 progressive which is far from your original footage . Mostly used for countries using natively ntsc
Neither myself, nor Ricksta (I don't think) are using NTSC-rate profiles.
The Preset setting I've been testing with is:
Generic OHCI HD 50Hz 960x720 25p over 60p
Indeed, I've just tried what Rick mentioned, and with the deck in 59.94Hz operating frequency, I can capture with all three 720p 59/60 input settings. This is technically wrong however, as the tape has been recorded at 60Hz. But like I said before, until Rick hears from the big geeks at Panasonic about this, I don't know what the real outcome of that difference in frequency is.
I've also tried a 50p over 60p project setting (as 720p50 is what I will be editing with in Avid) - but, predictably, this works but gives me double-speed footage. Which, while amusing, isn't a lot of help for me
A large part of the problem I'm facing here is to do with the Varicam format. It will record any framerate from 1-60fps. It has to operate and a system-frequency of 59.94Hz or 60Hz. That is what Rick and I are referring to. The limitation I face is that the Varicam format is not widely supported for PAL-based rates (25/50) as it requires communication with a deck operating in an NTSC-based system frequency (either 60Hz or 59.94Hz). This difference (between project/timeline framerates, and deck operating frequencies) is enough to ensure that IEEE1394/Firewire/OHCI capture is not possible in these modes in Final Cut Pro, Avid (any version) or any other NLE I have found.
We realise that the framerate and frequency we're working in has to be 50-based, and we're not making any mistakes in that respect.
So far Edius is the only NLE on the market, that I have been able to find, that supports Firewire capture from 60Hz DVCPro HD material in a 50Hz based framerate.
When you have captured the file in that project select a clip in the bin press alt+enter go to video info and tell me what the framerate is .
In a 50p over 60p project, when I capture footage shot 25p over 60 with the 'Constant Rate' capture profile I get a clip in the bin that is 50fps, but that plays at doubletime - which is what I'd expect.
I can change the framerate in the properties to 50fps, and it plays at the correct rate, but I'm not happy with the way to refactors the timing in that mode. It seems to create interpolated frames to fill the gaps, which provide an unusual appearance that I don't really like.
At present if I capture into 25p over 60p project, then import the resulting 25p footage into Avid, Avid doubles up the frames to produce 50fps material.
Some clarification here. The Varicam does indeed record at a constant 60fps. If the frame rate is set to 25fps for example it simply flags the active frames. This flag is carried in the vertical interval data. The reason for this system, is as suggested, it is very difficult to vary the speed of tape in a helical scan recording system. With the advent of solid state recording that Panasonic introduced in the AG-HVX200 it is now possible of course to only record the active (native) frames and this would be called 25pn for example.
Originally with the Varicam you used to use a device called a Frame Rate Converter. This box contained a hard drive with HD-SDI I/O. It would recognize the active "flagged" frames in the incoming signal and buffer them through the hard drive and then play them out at the correct frame rate.
More recently NLE's such as Avid, FCP and Edius have incorporated this flagged frame recognition and perform the extraction automatically. Thus when I tested a 25fps Varicam ingest on a 25 Frame timeline I am getting realtime playback. If I had recorded at 50fps and I placed that on a 25 frame timeline I would have very smooth half speed. Also the newer DVCPRO HD decks such as the AJ-HD1700 and AJ-HD1400 have the ability to decode "on-speed" frame rates such as 30fps, 25fps and 24fps.
The issue that Dylan is facing is that the NLE's will not accept a firewire input at 60Hz, they only accept it at 59.94, this is a .001 frequency difference and should be negligible. The other alternative is to ingest via HD-SDI via a Black Magic or AJA Kona card etc. These boards also support the variable frame rate function.
I hope that this helps clear things up a little.
Rick Haywood
Manager Broadcast & Display Systems
Panasonic New Zealand Ltd.
Further to what Rick is saying... The issues with most NLEs for PAL users is the disparity between the 59.94/60Hz operating frequency of the deck and the 50Hz based framerates the applications are working with in PAL framerates.
As for the constant 60fps - it is indeed recording 60 images per second to a tape, but as I said before, only a certain number are unique - only the flagged frames. In 25fps, the camera samples the sensor 25 times a second and records that frame to tape. Essentially you get frame 1 recorded for 2 frames, frame 2 recorded for the next three frames, frame 3 recorded for 2 frames, etc... The first frame with each unique image is 'flagged'. To rebuild the recorded framerate, only the flagged images are captured.
The big bonus of Edius for me here is that it can capture the PAL framerates from the 59.94Hz deck over Firewire directly. Something that Avid and FCP are unable to do.

Strange Screen Capture Problem

Ok, I'm stumped and hope someone can help me out.
For some reason, on my macbook pro, I can't get the screen capture cmd-shift-4-space to work. All the other screen capture modes work (eg. cmd-shift-3 and cmd-shift-4).
When I hit the cmd-shift-4 command and then hit the space bar, I see the camera show up, but it will not select individual windows. Instead the whole screen is highlighted and when I click, it takes a blank white picture. How do I fix this? Thanks.

Have you tried booting in Safe Mode? Hold down the Shift key as soon as you hear the startup chime. The boot will take longer, as the system repairs the drive, clears some caches, and disables all third party startup items (and some Apple ones as well). Try it in Safe Mode, then reboot normally and try it again. If it works in Safe Mode, but not when you reboot, then there is a conflict with some startup item.
Francine
Francine
Schwieder

Span & wireshark to see p-bits and vlan tags

Problem:
I do not see 802.1Q tags nor do I see p-bits (COS) in my wireshark captures. My setup is not working and I have no way to verify (sniff) that the 6509 is setting the p-bits to 3. I need to see them to troubleshoot effectively. Help!
Setup:
I am port mirroring off of my 6509. Port 1/16 should be tagging and setting the p-bits to a value of 3. How can I confirm?
interface GigabitEthernet1/16
description DonkX
no ip address
load-interval 30
mls qos cos 3       ! I've tried my tests with and without this command
mls qos cos trust      ! I've tried my tests with and without this command
switchport
switchport access vlan 941
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 941
switchport mode trunk
no cdp enable
end
sho mon
Session 1
Type                   : Local Session
Source Ports           :
    Both               : Gi1/16
Destination Ports      : Gi8/47
Port G1/16 is the GE uplink to DonkX
Port G8/47 is the Windows 2003 Server with wireshark.
Port G8/9 is my RH4 Linux box with TCPdump.
Steps taken to resolve the problem:
I have followed this document to set this up correctly on my windows box with a Intel Proset 1000MT. I have updated the drivers and made the registry changes with no captures showing tagging/cos information.
http://www.intel.com/support/network/sb/CS-005897.htm
Regardless of my settings, this document says I shouldn't have to worry about drivers:
http://wiki.wireshark.org/CaptureSetup/VLAN
"You'll definitely see the VLAN tags, regardless of what OS the independent system is running or what type of network adapter you're using."
Details:
I am testing a new GPON access product (DonkX) that uplinks via GigE using trunking and setting p-bits. To prioritize my video the new DonkX sets the p-bits to 3 and it instantly ceases that traffic. I have only unidirectional traffic at this point so I can no longer arp, icmp, ftp, tftp, noth'n. The 6509 sends back a response to DonkX but I believe it is dropped because the p-bit is not set to 3. If I remove the priority from 3 to 0 on the DonkX system then it works correctly but without QoS of course.
-JGR

Alright, the saga continues. I saw tagged frames last week but began troubleshooting again this morning and can't see tagged frames!
If I remove the span then I can see tagged traffic on g8/47 (Windows 2003 Server 802.1q not configured on NIC). If I turn on monitoring I see no tagged traffic. I also tried this on a laptop running Fedora 12 (on g8/47) and had the same results. Any ideas?
I've mirrored another trunk port that is in production passing tagged traffic to an 3560 trunked and going to an ASA. The port to the 3560 and ASA (g3/7) requires tagging and works properly; however, I cannot see tags on this port either. Do you see anything obvious here or is this looking like a tac case?
interface GigabitEthernet1/16
description DonkX
no ip address
load-interval 30
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 941
switchport mode trunk
no cdp enable
end
interface GigabitEthernet8/47
no ip address
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
no cdp enable
end
conf t
no mon sess 1
mon sess 1 sourc int g1/16
mon sess 1 dest int g8/47
sho mon
Session 1
Type                   : Local Session
Source Ports           :
    Both               : Gi1/16
Destination Ports      : Gi8/47
Unit details:
WS-C6509 Version 12.2(18)SXD4
NAME: "1", DESCR: "WS-X6516A-GBIC SFM-capable 16 port 1000mb GBIC Rev. 4.2"
PID: WS-X6516A-GBIC
NAME: "8", DESCR: "WS-X6748-GE-TX CEF720 48 port 10/100/1000mb Ethernet Rev. 2.3"
PID: WS-X6748-GE-TX
NAME: "6", DESCR: "WS-SUP720-BASE 2 ports Supervisor Engine 720 Rev. 3.1"
PID: WS-SUP720-BASE
NAME: "msfc sub-module of 6", DESCR: "WS-SUP720 MSFC3 Daughterboard Rev. 2.3"
PID: WS-SUP720
NAME: "switching engine sub-module of 6", DESCR: "WS-F6K-PFC3A Policy Feature Card 3 Rev. 2.4"
PID: WS-F6K-PFC3A

Capturing RTP sent by JMF with Wireshark

The post was originally at http://forums.sun.com/thread.jspa?threadID=5331241.
I am using http://java.sun.com/javase/technologies/desktop/media/jmf/2.1.1/solutions/RTPConnector.html as a template in my program. I see the packets sent back and forth using Wireshark but Wireshark doesnt recognize them as RTP packets but UDP. The original thread had an answer about the payload.
Where is the payload defined in the sample code I am using and how can I change the payload so that Wireshark captures them as RTP? Is it this line:
ContentDescriptor cd = new ContentDescriptor(ContentDescriptor.RAW_RTP); If yes, what should I change it to? Also, I took a look at Wireshark and you can force the UDP packets to decode as RTP but it is not very feasible.
Thanks.

If you need the custom RTPConnector to send out UDP packets that show up as RTP packets, I'd recommend reposting the question to the networking forum. That's more of a networking question than it is a JMF one.

Applying span port for sniffer

Hi,
We want to sniff some traffic that is passing between two nodes in our network.
The flow will look like this;
Edge switch > Core switch > (Wireless controller A) > metro ethernet link > Core switch > (wireless controller B)
Wireless controller is connected to the core switch. We want to sniff traffic that passes from controller A towards the other side of the network.
Controller A side belongs to us, hence we can only put sniffing on our end.
Please help to understand how to setup span port on a laptop in this setup.
If we connect a notebook on the coreswitch to sniff traffic passing through, will it be right?
Appreciate all inputs.

That's correct, the only thing I might note is to decide if you want to collect both rx and tx data? By leaving it default, as you did above, it will capture"both" directions. Capturing both is fine, but it will increase your wireshark capture size. I would also recommend applying a wireshark filter to only see the specific traffic you are interested in. A simple Google search will give you more info on wireshark filters. Lastly, remember to remove the monitor session once you are done. We see leftover SPAN sessions often causing various switch problems, so they are only recomended to use as needed.
HTH
Luke

Is FCE 3.5 able to use a 2TB external hard drive for capture?

Having strange problems capturing on my newest (& biggest) external drive, a 2 TB G-raid. Even if I set the G-raid as the only scratch drive, FCE captures to the Mac hard drive. I am now getting past the midpoint of this drive's capacity, that is there's already about a terabyte of footage on it. Is there an upper limit of drive size FCE will handle?
I've tried moving the newly-captured footage over to the G-raid in Finder and deleting it from the Mac HD but then get into difficulty with what seem to be spurious and intractable "media offline" messages.
Not sure if this is inherent in the software or if I maybe have a bad external drive (it's only about 9 months old.) Or other possibilities?
I'm thinking about reformatting the big drive into 2 volumes - the footage is backed up on other drives - but that's a long run to reload all the data unless there's some likelihood it will work...
Any ideas?
Thanks,
ss

Thanks for input, Dick. Connection has been via 800FW only. It's been a frustrating 3 days, but I'm beginning to think drive/volume size was a red herring. Not only is FCE 3.5 unable to deal with this drive, but Finder on the OS X 4.11 has been unwilling to do a simple transfer of its files to another drive. A 3-month-old clone of my boot drive worked exactly the same as the current version on these tasks, that is, not very well.
Right now I am moving ~650GB of the same video clips from my only working backup drive (a 750 GB 400FW Seagate FAP) to a 1TB USB drive converted from Windows format for the occasion. Not for editing, just for a second backup... It's chugging along slow & steady.
Time to talk to my friends at G-Tech. I believe this drive is under 3-year warranty... :-)
Sharron

Extra span tag associated to fragment

I have a page header in a JSPF that I include on all pages. It works fine everywhere except on one page, where it renders twice a <span> tag and the text it contains, thereby showing the text twice with a slight offset. As if this was not strange enough, the extra span tag shows up in an altogether different spot in the page source.
I tried deleting the include, and then inserting it again (with the include deleted, both span tags get deleted). I tried copying the <div> tag with the include from a page where it worked. To no avail: the text still appears twice.
Any pointers, anybody???
Thanks,
Luca

Can you pls post your JSP page source (without the JSPF) which is producing the 2 spans? And then in a second post, show the source from the browser at runtime.... let's troubleshoot that first.
Also, when you use Preview in the designer, do you get 2 spans?
I'll see if I can get some eyes on it...
v

Fce capture camera turns off...frizbee for laptop?

hey all...just getting back into video after a while out and here's where the problem begins....
found a new camera, nice 3CCD, asked to film a campus promotional movie so found the 16:9 option and looks sweet, filmed a whole bunch now i'm trying to put it onto computer it's proving to be a slight worry, can i capture 16:9 dv into fce2?
i've found the anamorphic setting, not sure what one to use though so went with the 'DV-PAL Anamorphic' made a new sequence and opened the capture window pane and it showed up with a 'preview disabled' screen, the vertical color lines and all, pressed play on the screen (fingers crossed) and it sent the command to the camera and after a whole 0.5 of a second it switched the camera to stop without showing anything on the screen.
thought about the scratch disks and they're all going to the right place, my external hard drive, tried the capture now and setting the time codes and the capture clip buttons...tried a whole bunch of things but i cant make the camera keep playing.
if it's human error i can change (i hope haha) but is there something i'm missing? i've used the program before a lot, but only with importing 4:3 footage with my old camera through iMovie.(not sure why i used to do this...seemed to be the easiest option.)
any help would be greatly appreciated.
thanks in advance, mark.
system: iBook G4 1gHz
final cut express 2
panasonic gs250 in 16:9 shooting mode
external hard drive with plenty of room.

Easy setup is HDV-1080i60 as it usually is. But on a whim I just tried switching the easy setup to NTSC and strangely, the capture worked. I looked at the footage on the camera and it clearly says HDV1080i, and I clearly remember shooting the footage in HD. Makes no sense...I guess I can capture it as DV use that, it's really no big deal, but just weird.

Strange Wireshark Capture XR Span

Similar Messages

Maybe you are looking for