Spooky's profile - activity

Hi, You seem to be running a newer version of Wireshark but looking at older I/O Graph references. Running version 2.6

Hi, This will be difficult because www.7-zip.org is using HTTPS. If the file was downloaded over HTTP then you could s

Hi, TCP segment not capture may be normal if they are seen at the beginning of a capture or at least if you started cap

Hi, If you are playing online then most of your gaming traffic will be UDP packets. So filtering "BadTCP" will probably

Hi Darius, You can probably use Wireshark manually or a shell scripting language available on your platform to call tsh

Hi, A DNS amplification attack usually means that you are seeing "a lot" of DNS responses for queries that did not orig

+1 on the certificates and encryption setup as possible culprit

Hi Betty, If you only need a short list then there is Talos intelligence from Cisco. https://www.talosintelligence.com

Hi, I'm not sure what "N/A bps" is here but if you are going to Statistics then Conversations you can filter any of the

Hi, You are correct. The Time To Live (TTL) field in the Internet Protocol (IP) headers will limit how many hops a pack

Hi, My understanding is that you have a load balancer (LB) with a virtual IP (VIP) listening on port 8443 for HTTPS tra

Hi Bonnie, It is hard to tell without having the actual PCAP in front of me. The remaining parts may be the original i

Hi Bonnie, It is hard to tell without having the actual PCAP in front of me. The remaining parts may be the original i

Hi, First keep in mind that there are a lot of different video formats out there and that Wireshark may or may not be a

Hi, I'm a bit confused by the explanation so let me state my understanding: You are on a host on the same network as t

Hi, You may be able to capture some traffic by using a TAP on the link going from your router to your "Internet.” (To y

Hi, You may be able to capture some traffic by using a TAP (https://www.instructables.com/id/Make-a-Passive-Network-Tap

Hi, There should always be a 3-way handshake when starting a new TCP connection. (Corner cases exist but are very rar

Did you try capturing on the egress and ingress interface of the firewall? Is it possible the firewall no longer has th

Hi Each [TCP ACKed unseen segment] means that you captured a TCP ACK packet but did not capture the actual data that w

Do you mean email messages?

If you are indeed dropping packets then it is impacting your traffic. There are lots of reasons why a switch will drop

Hi TCP Retransmission and duplicate ACKs are signs of packet drops. If you are dropping packets then this is impacting

The answer is the usual "it depends" :) If you capture traffic on your PC while you have the issue you MAY see some err

The answer is the usual "it depends" :) If you capture traffic on your PC while you have the issue you MAY see some err