Ask Your Question
RSS
Sort by » date activity ▼ answers votes

2500 questions

595
views
no
answers
no
votes
2018-03-13 10:27:43 +0000 berbus

USB capture - What is the interpretation of URB fields?

82
views
1
answer
no
votes
2018-03-13 07:30:05 +0000 Packet_vlad flag of Ukraine

two different packets with same seq

5k
views
2
answers
no
votes
2018-03-13 03:23:39 +0000 Jim Aragon

How to create capture filter based on partial MAC address?

151
views
1
answer
no
votes
2018-03-13 01:12:24 +0000 Christian_R flag of Germany

There is no MSS replied in SYN,ACK

178
views
no
answers
no
votes
2018-03-12 20:06:21 +0000 gvaeth

Statistics > UDP Multicast > Display Filter > Apply Broken?

54
views
no
answers
no
votes
2018-03-12 16:45:26 +0000 musca001

Can't cut'n'paste filter expression to clipboard

93
views
no
answers
no
votes
2018-03-11 14:42:26 +0000 nshoe18

Wireshark on Mac not showing packets in display window

79
views
no
answers
no
votes
2018-03-10 23:06:53 +0000 parmentj

Why won't a dissector work when adding to btatt.handle?

534
views
1
answer
no
votes
2018-03-10 22:24:41 +0000 Christian_R flag of Germany

What causes continuous arp requests with same IP?

105
views
no
answers
no
votes
2018-03-09 21:40:00 +0000 RonF

Is there an implementation of Wireshark as a VMware Hypervisor service?

162
views
no
answers
no
votes
2018-03-09 21:33:35 +0000 vhfan54

Need help analyzing VOIP traffic

416
views
1
answer
no
votes
2018-03-09 14:06:59 +0000 Jaap flag of Netherlands

Why is this TCP SYN/ACK packet malformed?

32
views
no
answers
no
votes
2018-03-08 15:54:09 +0000 onceuponadime

Wireshark on disabling TCP dissector shows a different packet [closed]

81
views
no
answers
no
votes
2018-03-08 13:34:30 +0000 grahamb flag of United Kingdom of Great Britain and Northern Ireland

Wireshark public API for data

71
views
1
answer
no
votes
2018-03-08 12:38:52 +0000 Jasper

Syn without syn/ack issue ?

285
views
no
answers
no
votes
2018-03-07 10:37:56 +0000 grahamb flag of United Kingdom of Great Britain and Northern Ireland

how to use existing dissector in a new dissector inside a new plugin

76
views
1
answer
no
votes
2018-03-07 10:37:15 +0000 grahamb flag of United Kingdom of Great Britain and Northern Ireland

-Q -P Tshark flags works fine for text but doesn't work for pcap

773
views
1
answer
no
votes
2018-03-06 23:34:18 +0000 Bob Jones

get active users from pcap file

339
views
1
answer
no
votes
2018-03-06 22:00:22 +0000 mzimmers

why is my NTP client timestamp wrong?

513
views
1
answer
no
votes
2018-03-06 19:31:52 +0000 Guy Harris

Connect to rpcapd service on Windows from Linux/OSX using tshark

57
views
1
answer
no
votes
2018-03-06 18:12:30 +0000 Jaap flag of Netherlands

how I change tshark maximum number of fields allowed in template?

79
views
1
answer
no
votes
2018-03-06 13:10:03 +0000 grahamb flag of United Kingdom of Great Britain and Northern Ireland

Tshark - Notifications in the error file

82
views
1
answer
no
votes
2018-03-06 11:20:51 +0000 grahamb flag of United Kingdom of Great Britain and Northern Ireland

More than 2 full TCP packets without ACK and large MTU

342
views
no
answers
no
votes
2018-03-05 18:59:54 +0000 BMWE

advice on LUA dissector

248
views
1
answer
no
votes
2018-03-05 17:22:40 +0000 Jaap flag of Netherlands

Filtering out normal traffic

213
views
1
answer
no
votes
2018-03-05 17:17:20 +0000 Jaap flag of Netherlands

rtp.timestamp-offset field [closed]

501
views
1
answer
no
votes
2018-03-05 10:26:55 +0000 grahamb flag of United Kingdom of Great Britain and Northern Ireland

Gerrit code review - What does "cannot merge" mean on the bottom right?

ASK YOUR QUESTION

Join us at SharkFest '19 Europe!
November 4-8 · Palácio Estoril Hotel · Estoril, Portugal

Ask and answer questions about Wireshark, protocols, and Wireshark development

Older questions and answers from October 2017 and earlier can be found at osqa-ask.wireshark.org.

Tag search

Tags

Don't have Wireshark?

What are you waiting for? It's free! Wireshark documentation and downloads can be found at the Wireshark web site.