Guy Harris's profile - activity

@grahamb's comment lists the possible reasons why an adapter might not support monitor mode at all or support it poorly.

What exactly is it you're trying to do? Do you already have a file, and you want to extract that particular packet? Or

zigbee zcl payload field Sample Start Time doe not get decoded The payload field Sample Start Time for Zigbee pkt GetSam

Wireshark doesn't work for Windows 2012. Wireshark doesn't work for Windows 2012. I need version 4.0 or earlier to run i

Please report this as an issue on the Wireshark issues list.

What about Wireshark 4.4.12 ???? It's there now.

MindMax not working I watched all the Utube videos to configure mindmax for geolocation. Wire shark points to the corre

That is an incredibly old version of Wireshark, It may run into other issues of analysing captures

why am i not see my interfaces? no interfaces are come up

*Crickets* I can reproduce this on my macOS 15.7.2 VM. I filed Wireshark issue 20869. Follow that issue for further di

Crickets I can reproduce this on my macOS 15.7.2 VM. I filed Wireshark issue 20869. Follow that issue for further disc

crashes. ... Mac MIni with 15.7.2 Are there any crash reports for Stratoshark in the Console application (in the Ut

Wireshark does not include code to, for example, upload captures to a Web server. However as Chuckc notes, it stores ca

Anyway, installed npcap 1.84 and still problem is there This is probably either an Npcap issue or a driver issue. S

What does the Wireshark version information report? Help -> About should show you version information; copy and past

I have a New Protocol Hello wireshark community, We are a hardware developer and we have created a simple UDP Ethernet p

Why does Wireshark detect activity from my Win11 laptop connected to a Sharktap network tap? I read that the ethernet po

I read that the ethernet port would be automatically disabled to traffic and put into promiscuous mode for listening

So the quick start guide is for the Sharktap USB. Presumably you used the two Network ports to insert the Sharktap into

Why does Wireshark detect activity from my Win11 laptop connected to a network tap? I read that the ethernet port would

Ubuntu startup shows only Capture / o Cisco remote capture etc. No Open menu, 7 radio buttons none can be un-selected, n

...and bear in mind that, if "DLL" means "Windows DLL", providing only a Windows DLL means that users on, for example, L

You can also add that to your preference file to make it permanent. If you run Wireshark, you select Preferences from t

The decode of the first packet says "Encapsulation type: Network Monitor Filter (189)", "Version: 1", App Major Versi

We care far more about when a packet transited the ERSPAN source device than when it arrived at the packet capture en

The extra instructions involve the SKF_AD_VLAN_TAG_PRESENT BPF extension that can test whether or not a VLAN tag is p

dumpcap version uses a snapshot length of 512KiB Because it's running on macOS, (dynamically) linked with the macOS

(and BPFExam produces the same output as Wireshark if I set the snapshot length to 262144)

Q. Why does dumpcap -d and Wireshark -> Capture Options -> Compile BPFs produce different output for the same c

NapaTech seems to think it's a bug in the non-Napatech libpcap files. Napatech seems to be saying that, if you want

You need to use the -f <capture filter=""> option. Nope. tshark, like tcpdump, will (at least in the case of

Problem compiling under Windows I'm trying to build Wireshark under Windows in order to develop a dissector for a protoc

The Class D page to which you linked says "Class D is a protocol that converts a stream based TCP protocol to a message

Why does the "Output format" option when capturing not affect the file format? In version 4.4.8 (v4.4.8-0-g0d289c003bfb)

Regarding the issue of invalid file output format function In version 4.4.8 (v4.4.8-0-g0d289c003bfb), the final format o

If the new version of Wireshark is a new dot-dot release - for example, if you have it in the epan folder of Wireshark 4

Note that on that Wiki page, it doesn't show a 4.5 release; it shows, under "Future Release Branches", Wireshark 5.0, wh

Using an Advantech ULI-224TC RS-232 to RS-422/RS-485 converter. From the Advantech converter DB9 I'm going into my la

No Frames Captured using Serial/USB Adapter in Wireshark Hello, Using an Advantech ULI-224TC RS-232 to RS-422/RS-485 co

wireshark on wsl ubuntu - plugins not working I am trying to install the mavlink disector on my wel ubuntu machine I ad

What is printed if you open Terminal and run the commands ls -ld ~ ls -ld ~/.config ls -ld ~/.config/wireshark