Ask Your Question
0

Different info views between Windows and Mac for TCP packets

asked 2020-04-01 12:59:54 +0000

marsu gravatar image

updated 2020-04-01 14:16:01 +0000

Do you know how can I manage to see the same Info column for every packet for the same file in Wireshark mac than in Windows? It looks like in the Windows version, info also includes TCP Stream, and in Mac, in order to get that I have to go to Analyze > FTP Stream. I attach two captures, see packet number 6 to understand what I say.

WINDOWS:

image description

MAC:

image description

Thank you so much.

EDIT:

Post about dialogs images:

WINDOWS:

image description

MAC:

image description

edit retag flag offensive close merge delete

Comments

Please post output of wireshark -v or Help->About Wireshark for each machine.

Chuckc gravatar imageChuckc ( 2020-04-01 13:39:12 +0000 )edit

Your images don't seem to be publicly viewable.

grahamb gravatar imagegrahamb ( 2020-04-01 13:51:39 +0000 )edit

done, thank you @grahamb

marsu gravatar imagemarsu ( 2020-04-01 14:07:53 +0000 )edit

done, thank you @bubbasnmp

marsu gravatar imagemarsu ( 2020-04-01 14:16:23 +0000 )edit

Are FTP and FTP-DATA checked under Analyze->Enabled Protocols... ?
What are the port numbers set in the Preferences:

  Edit->Preferences...->Protocols->FTP
  Edit->Preferences...->Protocols->FTP-DATA
Chuckc gravatar imageChuckc ( 2020-04-01 14:29:36 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-04-01 14:30:04 +0000

Jaap gravatar image

First place to look would be in the menu Analyze -> Enabled Protocols... In the dialog that pops up type 'ftp' in the search field. Make sure all shown protocols are enabled.

edit flag offensive delete link more

Comments

FTP was disabled in Mac by default... None sense as in Windows it's enabled... Thank you so much @bubbasnmp and @Jaap

marsu gravatar imagemarsu ( 2020-04-01 14:32:29 +0000 )edit

This would seem to be a profile issue, I thought the default profile would be the same on all platforms. What happens if you create a new default profile on the MAC?

grahamb gravatar imagegrahamb ( 2020-04-01 15:16:36 +0000 )edit

@grahamb I uninstalled and reinstalled wireshark on Mac, shouldn't that restore the default profile?

marsu gravatar imagemarsu ( 2020-04-01 17:31:23 +0000 )edit

I'm not sure what happens on the Mac when you uninstall and then reinstall.

As exactly the same default profiles are installed for all OS's, they really shouldn't be different.

grahamb gravatar imagegrahamb ( 2020-04-01 19:17:34 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2020-04-01 12:59:54 +0000

Seen: 40 times

Last updated: Apr 01