Guy Harris's profile - activity

I am curious to whether Wireshark, natively, or by combining with additional tools, can support reading PCAP-over-IP

Is there any capture filter available to capture only beacons and action frames that contains Channel Switch Announcemen

With proper use of extern "C" it may be possible to write it completely in C++ (if C++ compilers turn extern "C" functio

Do you know a way of doing it with tshark ? Text dissections are written by TShark to the standard output, so there

The data appears "in" the FTDI messages broken out by existing Wireshark dissectors so could someone point me at an e

Dark mode text colour issue Hello Wireshark users, Wireshark developers. I am using Wireshark on Garuda (an Arch-based

Install Wireshark silently and capture logs Hello, I need to capture a Wireshark logs when the user login to the first

Will Wireshark on Windows ever have working TLS/rpcaps support to match rpcapd deployments that do support TLS? If

Is it possible for tshark or dumpcap to get the --enable-remote status from libpcap so that it could be displayed in

is that statement true or a mistaken assumption? It is 100% mistaken. I've added comments to that GitHub issue poi

However, it's not clear to me how the underlying mechanism in the GUI route operates as the resulting interface strin

However, it's not clear to me how the underlying mechanism in the GUI route operates as the resulting interface strin

Could the table be moved from the .c to a .h? Or either to libwireshark or libwsutil.

Could/should the description be included in the error message? Not all programs that use libpcap include dissectors

Do Iassume correctly that Wireshark does not support netwrok type 285 Yes. Is there any plan for support? Didn'

What do you mean by "configure x11"? The Windows and macOS versions of Wireshark don't use X11 for their user interface

I assume version 4.2.3 will be available on the apt package manager in the near future? That's up to the maintainer

Malformed packets on Linux but not Mac for the same .pcap I shared a .pcap with my colleague who is running Wireshark 4.

On most UN*Xes the command file is available that can help identifying the true type (by contents). On most UN*Xes ther

When I switch from channel 1 to another channel (e.g 2 or 124 doesnt matter) I get the message ""unable to ste channe

Unfortunately, the documentation on preferences isn't very good, where "isn't very good" means "close to nonexistent"; I

Actually we are looking for commands line option in tshark to enable Initialization Vector from Ignore protection bit l

That doesn't fix the problem for Wireshark. If Wireshark isn't showing the tds.prelogin.option.traceid field, please re

That company's plugin is badly-designed. It attempts to register libwiretap routines in the dissector registration routi

And there's the error, converted from small text, some of which is red-on-black, to regular text for the benefit of olde

And there's the error, converted from small text, some of which is red-on-black, to regular text for the benefit of olde

And there's the error, converted from small text, some of which is red-on-black, to regular text for the benefit of olde

And there's the error, converted from small text, some of which is red-on-black, to regular text for the benefit of olde

Accessing hardware network interfaces I use Wireshark on Ubuntu 22.04 . First of all, it was not exactly clear which co

What you should do is: install with "non-superusers should be allowed to capture from network interfaces"; run sudo gp

My time is wrong on Wireshark, right on my computer. Is Wireshark running on your computer, and are you using Wires

Intel AX210 wifi support on Linux Just got a new laptop with a AX210 wifi card and although it works under Linux ( Linux

DLT_LAPD combining to inboud/outbound direction give Network/user direction. ... DLT_LINUX_LAPD give only the s

text2pcap -P <dissector> is supposed to automatically set the link layer type to WIRESHARK_UPPER_PDU, but it se

Perhaps text2pcap should add support for LINKTYPE_WIRESHARK_UPPER_PDU.

Did you capture in monitor mode?

What are those filter expressions, and what you mean by "deprecated"? Note that, normally, "deprecated" means "you can

What are those filter expressions, and what does "deprecated" mean? Note that "deprecated" means "you can use them, but

On macOS, Activity Montior can get a sample of what a program is doing - select the program in Activity Montior and, fro

Windows has some DLL's and executables present that Mac does not. The macOS app bundle for Wireshark stores executa

I am unable to add 'bluetooth-monitor' as an interface to nftables even to test. Not all of the entities on which y