Ask Your Question

Spooky's profile - activity

2019-02-19 01:48:40 +0000 answered a question IO Graph Y-Axis

Hi, You seem to be running a newer version of Wireshark but looking at older I/O Graph references. Running version 2.6

2019-02-19 01:48:40 +0000 received badge  Rapid Responder (source)
2019-02-19 01:09:51 +0000 answered a question How to find size of file downloaded?

Hi, This will be difficult because www.7-zip.org is using HTTPS. If the file was downloaded over HTTP then you could s

2019-02-14 04:04:34 +0000 received badge  Rapid Responder (source)
2019-02-14 04:04:34 +0000 answered a question Video Buffer

Hi, TCP segment not capture may be normal if they are seen at the beginning of a capture or at least if you started cap

2019-02-14 03:48:12 +0000 answered a question troubleshooting Bad TCP

Hi, If you are playing online then most of your gaming traffic will be UDP packets. So filtering "BadTCP" will probably

2019-02-14 03:48:12 +0000 received badge  Rapid Responder (source)
2019-02-06 20:16:43 +0000 received badge  Rapid Responder (source)
2019-02-06 20:16:43 +0000 answered a question WiFi camera > Wireshark tcp dissect, data assembly > video player

Hi Darius, You can probably use Wireshark manually or a shell scripting language available on your platform to call tsh

2019-01-31 04:15:21 +0000 answered a question DNS amplification attack

Hi, A DNS amplification attack usually means that you are seeing "a lot" of DNS responses for queries that did not orig

2019-01-31 03:53:31 +0000 commented question TCP Retransmission PSH ACK

+1 on the certificates and encryption setup as possible culprit

2019-01-31 03:49:39 +0000 commented question Anyone know of a blacklisted IP database?

Hi Betty, If you only need a short list then there is Talos intelligence from Cisco. https://www.talosintelligence.com

2019-01-30 02:02:51 +0000 answered a question Is it Possible to filter A to B bps N/A or vice-versa in conversation?

Hi, I'm not sure what "N/A bps" is here but if you are going to Statistics then Conversations you can filter any of the

2019-01-30 01:56:14 +0000 answered a question Tracert command

Hi, You are correct. The Time To Live (TTL) field in the Internet Protocol (IP) headers will limit how many hops a pack

2019-01-30 01:32:56 +0000 commented question TCP Retransmission PSH ACK

Hi, My understanding is that you have a load balancer (LB) with a virtual IP (VIP) listening on port 8443 for HTTPS tra

2019-01-30 00:53:09 +0000 commented answer how to extract information of each video frames in a video streaming with Wireshark?

Hi Bonnie, It is hard to tell without having the actual PCAP in front of me. The remaining parts may be the original i

2019-01-30 00:52:06 +0000 commented answer how to extract information of each video frames in a video streaming with Wireshark?

Hi Bonnie, It is hard to tell without having the actual PCAP in front of me. The remaining parts may be the original i

2019-01-29 02:37:36 +0000 received badge  Rapid Responder (source)
2019-01-29 02:37:36 +0000 answered a question how to extract information of each video frames in a video streaming with Wireshark?

Hi, First keep in mind that there are a lot of different video formats out there and that Wireshark may or may not be a

2019-01-29 01:59:13 +0000 commented question windows routing and remote access server

Hi, I'm a bit confused by the explanation so let me state my understanding: You are on a host on the same network as t

2018-11-10 04:21:39 +0000 edited answer How I could capture the traffic of my smartphone or tablet

Hi, You may be able to capture some traffic by using a TAP on the link going from your router to your "Internet.” (To y

2018-11-10 04:20:15 +0000 received badge  Rapid Responder (source)
2018-11-10 04:20:15 +0000 answered a question How I could capture the traffic of my smartphone or tablet

Hi, You may be able to capture some traffic by using a TAP (https://www.instructables.com/id/Make-a-Passive-Network-Tap

2018-11-09 03:29:17 +0000 answered a question SYN followed by PSH ACK with incorrect ACK sequence number

Hi, There should always be a 3-way handshake when starting a new TCP connection. (Corner cases exist but are very rar

2018-11-09 03:29:17 +0000 received badge  Rapid Responder (source)
2018-11-06 20:54:28 +0000 received badge  Teacher (source)
2018-11-06 03:36:30 +0000 commented question client hangs no reset received

Did you try capturing on the egress and ingress interface of the firewall? Is it possible the firewall no longer has th

2018-11-06 03:17:14 +0000 answered a question TCP ACKed unseen segment

Hi Each [TCP ACKed unseen segment] means that you captured a TCP ACK packet but did not capture the actual data that w

2018-11-06 02:56:44 +0000 commented question how do I find an IP address

Do you mean email messages?

2018-11-06 02:23:19 +0000 commented question retransmissions in our network

If you are indeed dropping packets then it is impacting your traffic. There are lots of reasons why a switch will drop

2018-11-06 01:49:56 +0000 commented answer Is there a way to use Wireshark to prove my ISP is throttling my internet?

Hi TCP Retransmission and duplicate ACKs are signs of packet drops. If you are dropping packets then this is impacting

2018-11-01 15:28:59 +0000 received badge  Editor (source)
2018-11-01 15:28:59 +0000 edited answer Is there a way to use Wireshark to prove my ISP is throttling my internet?

The answer is the usual "it depends" :) If you capture traffic on your PC while you have the issue you MAY see some err

2018-11-01 15:22:52 +0000 received badge  Rapid Responder (source)
2018-11-01 15:22:52 +0000 answered a question Is there a way to use Wireshark to prove my ISP is throttling my internet?

The answer is the usual "it depends" :) If you capture traffic on your PC while you have the issue you MAY see some err