Hi Nordin,

Do you think it's coming from Wireshark?
If you can send the pcap file, I can check with wireshark 1.0.8 on debian and let you know. It works fine for me.

Eric