Packet_vlad's profile - activity

Maybe Proxy ARP is on?

Ah, ok, thanks for pointing me to the report.

NTP - show calculated fields in columns Hi all, I tried to create columns for NTP protocol fields (see screenshot), but

Hey Christian, sure you can. Right click on the column, 'Edit', Occurrence field:

As an example of what @jaap said: !(ip.addr[0-1] == AC.10 and ip.addr[3] == 25) Filter out all addresses with first

As an example of what @jaap said: !(ip.addr[0-1] == AC.10 and ip.addr[3] == 25) Filter out all addresses with first

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.10

Do you have a possibility to arrange packet capture on the Hyper-V side? For me it looks the next: packets from 10.100

Thanks for the detailed information, will take a look soon. ..By FW I meant firmware, not firewall, that could have been

Thanks for the detailed information, will take a look soon. ..By FW I meant firmware, not firewall, that could be mislea

Could you please share network diagram (even simple one, just to see traffic path and endpoints) and capture point locat

From the very high packet rate and TTL not decreasing on per-packet basis I guess you have switching loop. Please review

From the very high packet rate and TTL not decreasing on per-packet basis I guess you have switching loop. Please review

Hello, What application is this? Check its settings/configuration. I guess application could override system-wide value.

You can use any file sharing service (Google Drive, Dropbox etc) and post a link here. Trace file is preferable.

This is perfect time to see the capture or at least a screenshot. Total Bytes in flight = bytes sent (SEQ + last TCP.l

Hi, It would be nice to have actual trace file to explain it to you better. There are several things to consider. 1)

So from the sender point of view the window is 150kB What window do you mean? A sender is aware of 2 windows: CWND

So from the sender point of view the window is 150kB What window do you mean? A sender is aware of 2 windows: CWND

The task is quite complex and usually you can't do this. As current congestion window value is never transferred in pac

This is Moving Average Window (similar as here). As I understand it counts in seconds, so MA = 1 means Moving Average wi

This is Moving Average Window (similar as here). As I understand it count in seconds, so MA = 1 means Moving Average wit

This is Moving Average Window (similar as here)

That's because the client emitted some data packets we don't see in the capture. For the rest network diagram is needed.

That's because the client emitted some data packets we don't see in the capture. BTW as I understand Wireshark doesn't

A network diagram would be of a great help here because there is an asymmetric path involved together with FHRP protocol

A network diagram would be of a great help here because there is an asymmetric path involved together with FHRP protocol

You're welcome!

That did't work because there are two IP fields in a packet - source IP and destination IP. If you add 3rd IP with the s

That did't work because there are two IP field in a packet - source IP and destination IP. If you add 3rd IP with the sa

host 1.1.1.1 and host 2.2.2.2 host 1.1.1.1 and host name.com Please also check this reference for other details.

It's hard to tell without seeing an actual PCAP, but usually getting stuck on constant (not slowly increasing) Bytes In