Ask Your Question
0

Packet Capture Shows No TCP, UDP, or HTTP Traffic

asked 2023-02-26 02:14:59 +0000

ronsonsdown gravatar image

updated 2023-02-28 02:20:44 +0000

I just downloaded wireshark on my Macbook Air running Big Sur, and when I listen on the WiFi interface (en0) I see tons of traffic, but it is all just showing up as bare ethernet frames between my machine and my router with the occasional ARP thrown in. I am sure I am on the right interface, but I can't tell why my packets aren't being parsed as what they are. What am I missing? https://imgur.com/oO7svCG

edit retag flag offensive close merge delete

Comments

Not sure as we only have your text to go on.

hugo.vanderkooij gravatar imagehugo.vanderkooij ( 2023-02-27 08:36:48 +0000 )edit

Ok, I added a link to the screen shot of my packet capture. I see that embedding images is not allowed.

ronsonsdown gravatar imageronsonsdown ( 2023-02-28 02:21:23 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-02-28 08:38:34 +0000

Guy Harris gravatar image

It appears that IPv4 recognition and dissection might be disabled in your configuration, which would also prevent the dissection of TCP or UDP on top of IPv4, and thus would prevent the discussion of HTTP on top of TCP on top of IPv4.

Select "Enabled Protocols..." from the "Analyze" menu. Type "ipv4" in the Search box. It should show a row that has "IPv4" and "Internet Protocol Version 4" in it. If there is not a blue checkbox to the left of "IPv4", check that checkbox and click "OK"; the lack of a blue checkbox would mean that IPv4 is, in fact, disabled in your Wireshark configuration, and checking the checkbox and clicking "OK" should enable it and cause the IPv4 packets to be dissected.

edit flag offensive delete link more

Comments

Wow that was it. Not even sure why it wasn't checked. Thank you!

ronsonsdown gravatar imageronsonsdown ( 2023-02-28 17:42:05 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2023-02-26 02:14:59 +0000

Seen: 880 times

Last updated: Feb 28 '23