Ask Your Question

Network drive not showing up in Wireshark File dialog

asked 2019-03-26 03:23:44 +0000

Tolein gravatar image

updated 2019-03-26 15:14:04 +0000

Jaap gravatar image

Hello, I have an really odd issue on my main PC. On my home network I have a Samba server for file sharing. I can open the share just fine in windows file explorer and every other application with wireshark being the exception. I've done some captures and it seems that wireshark isn't sending an SMB file request. It works without issue on every other computer in my home so I've ruled out the server. I've checked versions, turned firewall off, enabled network discovery, etc etc etc. Has anyone ever ran across an issue like this with wireshark that seems to be application specific?

edit retag flag offensive close merge delete


You've a Samba server for file sharing, which you can access from applications on workstations on your home network. So far nothing out of the ordinary. But you can't open a file on the Samba server from Wireshark, is that what you're saying? So File | Open... doesn't allow you to browse to the Samba share? What does that have to do with the title of the question: Network Devices not showing up? What network interfaces are you talking about then in this context? Wired Ethernet, WiFi?

Jaap gravatar imageJaap ( 2019-03-26 06:43:26 +0000 )edit

Using Wireshark 3.0, saving a file from Wireshark to an SMB share using a unc path, e.g. \\host\path\to\file works for me. Note the remote host is running Windows, so no Samba involved.

Do you possibly mean that the Samba server doesn't appear under the "Network" option in the file save\open dialog?

Can you elaborate in a more detail what you are trying to do (step by step guide)?

grahamb gravatar imagegrahamb ( 2019-03-26 10:58:18 +0000 )edit

This is what I am doing step by step.

  1. Open wireshark application.
  2. Click file and then open.
  3. The file explorer window opens. I click on My PC on the left.
  4. Network Devices is not listed.

If I open file explorer from any other application network devices is listed as an option. On other machines in my home the network devices are listed with two drives when I do the same thing in wireshark.

Grahamb, putting \host\path\to\file in the filename seems to work as a work around. I was putting the drive letter in front of it before with no success.

Tolein gravatar imageTolein ( 2019-03-26 11:46:06 +0000 )edit

So the Samba file server is a "mapped" network drive? I just mapped a drive letter to my other Windows host, and now that shows up as you said under "Network locations" in the "This PC" section.

What I have noticed is that odd things happen on Windows 10 depending on how the remote server is mapped. I created the mapping from "File Explorer".

grahamb gravatar imagegrahamb ( 2019-03-26 12:07:06 +0000 )edit

Yes it is a mapped network drive. I have tried mapping it with both the IP and the server name. When I open up wireshark I don't even have network devices as an option after clicking on My PC. I can see the drives and access them just fine in other applications however.

Tolein gravatar imageTolein ( 2019-03-26 12:41:54 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2019-03-26 12:45:13 +0000

grahamb gravatar image

I think this will have to be reported as a bug on the Wireshark Bugzilla.

The use of mapped drives should all be transparent to Wireshark, and the UI toolkit Qt, but it seems there's something odd going on for you.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-03-26 03:23:44 +0000

Seen: 954 times

Last updated: Mar 26 '19