Ask Your Question

grahamb's profile - activity

2024-05-13 10:09:44 +0000 commented answer What version is supported on windows 2012R2

Sometimes versions may install even if not officially supported, pot-luck what works though. I'm not entirely sure of t

2024-05-13 09:12:38 +0000 received badge  Rapid Responder (source)
2024-05-13 09:12:38 +0000 answered a question What version is supported on windows 2012R2

See the wiki page Wireshark End of Support for info. For 2012, the last supported version is 4.0

2024-05-13 08:25:29 +0000 commented question Which is best GUI to use ?

Wireshark is a packet analysis tool, with a GUI, for file monitoring other tools may be more suitable.

2024-05-10 08:16:27 +0000 commented answer How to use Wireshark to find where an application queries for updates?

SSMS is available via winget, e.g. > winget show --id Microsoft.SQLServerManagementStudio Found Microsoft SQL Server

2024-05-09 14:33:39 +0000 received badge  Rapid Responder (source)
2024-05-09 14:33:39 +0000 answered a question How to use Wireshark to find where an application queries for updates?

Because of the use of TLS, that might be difficult. I think you're attacking the problem the wrong way, you could look

2024-05-08 13:01:38 +0000 commented question MDM Deployment

So much for the support from your buck-passing MDM vendor. Wireshark for macOS is distributed as standard .dmg files so

2024-05-08 11:45:05 +0000 commented question MDM Deployment

So much for the support from your buck-passing MDM vendor. < Wireshark for macOS is distributed as standard .dmg file

2024-05-08 11:18:43 +0000 commented question MDM Deployment

Not really a Wireshark issue, more about your MDM solution. What version of the OS and Wireshark are you having issues

2024-04-30 13:13:54 +0000 commented question using 10BASE-T1S on wireshark

Looks like a dupe to me.

2024-04-29 09:04:33 +0000 edited question Asciidoctor error on gmake wireshark_rpm : RHEL 8 install with ruby gems asciidoctor

Asciidoctor error on gmake wireshark_rpm : RHEL 8 install with ruby gems asciidoctor I have successfully run cmake with

2024-04-26 08:51:07 +0000 edited answer We are upgrading wireshark from 2.6.7 to 4.2.3.Need some info on keys and values in decoded data

I don't think field names have leading or trailing spaces, at least they're not intended to have them. Info that might

2024-04-26 08:48:20 +0000 edited question I need serious beginner help in translating. See below.

I need serious beginner help in translating. See below. a conversation: 42 Who has 192.168.50.195? Tell 192.168.50.35.

2024-04-25 15:55:42 +0000 received badge  Rapid Responder (source)
2024-04-25 15:55:42 +0000 answered a question We are upgrading wireshark from 2.6.7 to 4.2.3.Need some info on keys and values in decoded data

I don't think fields have leading or trailing spaces, at least they're not intended to have them. Info that might help:

2024-04-25 15:02:56 +0000 commented question We are upgrading wireshark from 2.6.7 to 4.2.3.Need some info on keys and values in decoded data

I still don't understand the context and your terminology. When you mention "key" do you mean a field name or value?

2024-04-25 14:59:41 +0000 commented question We are upgrading wireshark from 2.6.7 to 4.2.3.Need some info on keys and values in decoded data

Sample Keys are added. This below set of keys is not having any extra spaces at begin or at end "Diameter Protocol" "Ve

2024-04-25 11:21:32 +0000 commented question Feature request: Dynamic Colorization Rules

The enhancement request was raised in GitLab as: https://gitlab.com/wireshark/wireshark/-/issues/19802

2024-04-25 10:56:46 +0000 commented question We are upgrading wireshark from 2.6.7 to 4.2.3.Need some info on keys and values in decoded data

What do you mean by "Key"?

2024-04-25 08:24:10 +0000 edited answer How do I export RTT data of a TCP stream?

SMP - Simple Matter of Programming (tm) Might be slow with multiple passes of tshark but could be done with a script th

2024-04-19 07:42:53 +0000 commented question very tiny text

The OS you're using would help. Works fine for me on a 4k 43" monitor on Windows 10 with the Wireshark preferences font

2024-04-18 15:40:36 +0000 commented question How to find RTP packetiztion time (ptime)

1.8.15 is an extremely old version of Wireshark and there have been many, many changes since then.You should upgrade to

2024-04-16 14:53:46 +0000 edited question TCP Port numbers reused

TCP Port numbers reused Hi experts, For the pcap, SYN、SYN/ACK、RST、SYN、SYN/ACK、RST, When I ignore the No.4 SYN packet,Wh

2024-04-16 14:36:33 +0000 edited question TCP Port numbers reused

TCP Port numbers reused Hi experts, For the pcap, SYN、SYN/ACK、RST、SYN、SYN/ACK、RST, When I ignore the No.4 SYN packet,Wh

2024-04-16 08:04:57 +0000 commented question Why would wireshark on one PC capture LLDP packets and another not?

Also Wireshark profiles may be different on the two instances.

2024-04-15 09:04:58 +0000 edited question Custom ecpri dissector based on original implementation

Custom ecpri dissector based on original implementation Hello, I need some modification to basic epan/dissectors/packet

2024-04-12 13:18:36 +0000 commented question Update offline

Can't you manage updates through whatever other automation solution you have, e.g. for OS updates?

2024-04-12 08:48:24 +0000 commented question bitbake wireshark 4.2.3

Duplicate of https://ask.wireshark.org/question/34126/bitbake-wireshark-423-stuck-at-99/

2024-04-09 18:33:26 +0000 commented question visual c++ redistributable installer failed with error 5

Mostly this issue comes up when systems are too old or are not up to date with MS updates and a pre-requisite is missing

2024-04-09 07:23:12 +0000 edited answer Could tshark capture the de-encrypted packet when receiving ESP?

Seems expected for tunnel mode, from code of kernel. xfrm_input .... if (x->outer_mode->flags & XFRM_MODE

2024-04-03 07:48:13 +0000 answered a question I am not able to capture TCP data packets from a specific IP

Probably your capture setup doesn't permit the capture of the required info. This is particularly likely if your enviro

2024-04-03 07:48:13 +0000 received badge  Rapid Responder (source)
2024-04-01 07:26:09 +0000 commented answer bitbake wireshark 4.2.3 stuck at 99%

This is not a Wireshark project issue, BitBake is not a supported build system. I have no experience whatsoever with Bit

2024-03-28 08:55:42 +0000 answered a question bitbake wireshark 4.2.3 stuck at 99%

That looks like a question for the BitBake folks, or the producer of the recipe for the Wireshark build.

2024-03-28 08:55:42 +0000 received badge  Rapid Responder (source)
2024-03-25 08:56:52 +0000 answered a question Wireshark dependency on minimum/specific npcap/winpcap versions?

Winpcap is dead, although Wireshark is able to use it if it's the only capture library available, this isn't recommended

2024-03-25 08:56:52 +0000 received badge  Rapid Responder (source)
2024-03-20 13:55:43 +0000 answered a question Monitor Mode in MacOS Sonoma

Maybe the OSX section of the WLAN Capture Setup wiki page will help.

2024-03-20 13:55:43 +0000 received badge  Rapid Responder (source)
2024-03-14 08:54:48 +0000 edited question ERROR MESSAGE WHEN STOPPING/RESTARTING CAPTURE

ERROR MESSAGE WHEN STOPPING/RESTARTING CAPTURE I receive the following error message when stopping the capture: Error f

2024-03-13 17:24:02 +0000 answered a question WiresharkPortable64_4.2.3.paf.exe has all the functionality?

It does not have the same functionality as the npcap installer isn't included so you won't be able to capture traffic.

2024-03-13 17:24:02 +0000 received badge  Rapid Responder (source)
2024-03-13 17:10:52 +0000 commented question POST Request to API with Wireshark

Don't scrape text from the dialog, use the "Copy to Clipboard" button. One of my best ever contributions to the project

2024-03-12 09:43:01 +0000 commented question How should I share code when I lack the karma to attach it?

E.g. a public file share. Unfortunately this is required otherwise spammers will abuse the "free" upload option. Karma

2024-03-12 09:42:06 +0000 commented question How should I share code when I lack the karma to attach it?

E.g. a public file share. Unfortunately this is required otherwise spammers will abuse the "free" upload option.

2024-03-12 09:41:43 +0000 commented question I have malformed packets observed in my bacnet MSTP protocol, can you able to sight a reason why those are formed?

Captures can be uploaded to a public file share and a link to the file posted back here. Unfortunately this is required

2024-03-12 09:39:43 +0000 commented question How should I share code when I lack the karma to attach it?

E.g. a public file share.

2024-03-08 14:40:04 +0000 edited question "unable to set channel or offset" when switching WiFi channels

"unable to ste channel or offset" when switching WiFi channels Hi, When I switch from channel 1 to another channel (e.g

2024-02-29 18:10:44 +0000 commented question Installing wireshark/tshark on Linux Debian

Heading a long way out of my comfort zone, I think you add the PPA to your apt sources, apt update and then the newer ve