How can I find my number in TCP header/payload?

asked 2019-06-18 14:02:18 +0000

Fukra gravatar image

Hello guys, i'm pretty new to wireshark and i have a question. I have to create a recording and in that i have to get my number like ex:91241 (TCP Protocol). Can anyone help me to get it right?

edit retag flag offensive close merge delete

Comments

Can you please clarify what you're asking? By "create a recording", do you mean "capture some packets" or something else? And what do you mean by "i have to get my number"? Are you trying to find the protocol ID for the packets? Please be as clear as you can when asking questions because it's very difficult to provide useful assistance otherwise.

cmaynard gravatar imagecmaynard ( 2019-06-18 16:22:37 +0000 )edit

https://imge.to/i/PpKO2 .

Just like that to get my numbers in that

Fukra gravatar imageFukra ( 2019-06-18 16:26:23 +0000 )edit

like i have a matriculation number on site and i have to get it into my wireshark as a TCP Protocol

Fukra gravatar imageFukra ( 2019-06-18 16:48:43 +0000 )edit

I'm still not sure exactly what you're trying to do, but the image looks like a hex dump, presumably of packet data? In case you're trying to convert that ASCII hexdump to a pcap file that you can load into Wireshark, have a look at text2pcap. Alternatively, you can use Wireshark's File -> Import From Hex Dump feature, which will essentially accomplish the same thing.

If you're trying to do something else, then you'll have to clarify.

cmaynard gravatar imagecmaynard ( 2019-06-18 16:55:07 +0000 )edit

Do you mean "how do I find packets that have a given number, in ASCII, somewhere in the packet?"

Guy Harris gravatar imageGuy Harris ( 2019-06-18 17:00:43 +0000 )edit

Yea @Guy Harris. I have to find somehow in my packets my "matriculation number" and to convert it in ASCII. But i don't know how to find my "matriculation number" there i keep trying with filters and so on but can't get it.

Fukra gravatar imageFukra ( 2019-06-18 17:03:47 +0000 )edit

"Create a Wireshark recording in PCAP format containing your student ID contains. The matriculation number may be in the Protocol headers or also occur in the payload. The recording should contain only your matriculation number and no further Matriculation. The transport protocol MUST be TCP. The file of Mitschnitts must be able to be opened without error in Wireshark." This is the problem i've to solve...

Fukra gravatar imageFukra ( 2019-06-18 17:05:23 +0000 )edit