Questions - Ask Wireshark ASK YOUR QUESTION Ask and answer questions about Wireshark, protocols, and Wireshark development Older questions and answers from October 2017 and earlier can be found at What are you waiting for? It's free! Wireshark documentation and downloads can be found at the
Wireshark Q A By double-clicking such line at the main page of Wireshark (shown if no file is currently open or captured), or by pressing Start after selecting the line in the "Capture interfaces" window open as Capture -> Options, you start capturing at that root hub
no filters, all interfaces, promiscuous mode - Wireshark I have used Wireshark before successfully to capture REST API requests [Picture - not enough points to upload] I have a new laptop, installed WS, and am seeing that HTTP protocol does not appear in the window while refreshing a browser or sending requests I removed all capture filters, selected all interfaces (overkill, I know), and set them all to promiscuous mode Nevertheless, when I use
Wireshark Q A FYI - Here is the full Wireshark packet of the summarized packet that I noted above Do you see anything in there that would allow me to search for the ZeroWindowProbeAck info?
Help - Ask Wireshark Ask Wireshark Help provides answers to questions about using Wireshark, including filtering, HTTP requests, and troubleshooting
Please explain this TCP Retransmission Sequence - Wireshark This sequence below repeats over and over It should just be a big message from 200 to 182 with a 1 byte response, and then a short message from 182 to 200 with a 1 byte response Is every message in each direction really getting re-transmitted and are the TCP-Dup ACK and TCP-Keep Alive's a problem?
Current Wireshark doesnt work for Windows 2012; where are the older . . . Wireshark doesn't work for Windows 2012 I need version 4 0 or earlier to run in a service within a VM I've searched everywhere and you only offer the current version for download Is there a way to download this older version?
Enabling monitor mode on Win 11 - Ask Wireshark I went into Wireshark and on the home screen the wifi activity is shown When i go to Capture>Options, the checkbox under the Monitor Mode column does not allow me to check it I don't know why it's doing this? If I double click the wifi interface in question it starts capturing, but I haven't seen any other traffic other than my own
Wireshark Q A [PSH,ACK] wireshark capture 0 I am capturing a https traffic from a PC to the web application and I am seeing an ACK follow by a PSH,ACK from the source to destination and vice versa: PC [ACK] -> WebApp PC [PSH,ACK] -> WebApp WebApp [ACK] -> PC WebApp [PSH,ACK] -> PC What does it mean? Thanks
Wireshark Q A So data may be missing due to packet truncation, or there may be some protocol extension unknown to the dissector, or the actual protocol may be a different one than the dissector expects - e g as soon as an SDP re-negotiation changes the codec from G 729 to T 38, Wireshark starts applying a T 38 dissector to any UDP packet to from the media