Ask Your Question

Wireshark - exports what it recognises as a jpeg but the jpeg doesn't open

asked 2021-03-14 14:27:55 +0000

MrJ gravatar image

I have a JPEG GET request in my PCAP as below but when I export it, it's not a valid JPEG file

Any ideas?

image description

edit retag flag offensive close merge delete


Change the format to Hex Dump and look for a matching file signature

Chuckc gravatar imageChuckc ( 2021-03-14 14:53:49 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2021-03-15 10:11:04 +0000

hugo.vanderkooij gravatar image

The screenshot is hard to read. But my gut feeling is that this i actually not a JPEG image based on the first characters in the response.

edit flag offensive delete link more


I had the same idea... if you look at the hex data, does the image start with FF D8 FF? See:

SYN-bit gravatar imageSYN-bit ( 2021-03-15 10:56:06 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2021-03-14 14:27:55 +0000

Seen: 475 times

Last updated: Mar 15 '21