Ask Your Question

Jaap's profile - activity

2019-02-16 09:40:11 +0000 received badge  Rapid Responder (source)
2019-02-16 09:40:11 +0000 answered a question Wireshark PCAP Reconstruction help?

Did you notice that the ICMP errors coming from the upstream interface, facing your host #1? After your ICMP request pas

2019-02-15 17:21:46 +0000 commented answer RTP stream is empty or codec is unsupported

Export the RTP payload as raw file and feed that into a decoder. That's the procedure in short. Additional problems aris

2019-02-14 22:54:01 +0000 commented answer how to use tshark to divide a packet into several records?

A quick hack shows that it may be possible after all. Needs more work though to definitively say so.

2019-02-14 20:58:01 +0000 edited answer how to use tshark to divide a packet into several records?

You assume that the AS's in a path segment are being processed as a set. But what you ask for is the 'as4', or in your l

2019-02-14 20:56:52 +0000 received badge  Rapid Responder (source)
2019-02-14 20:56:52 +0000 answered a question how to use tshark to divide a packet into several records?

You assume that the AS's in a path segment are being processed as a set. But what you ask for is the 'as4', or in your l

2019-02-14 07:16:48 +0000 commented question how to use tshark to divide a packet into several records?

Have you tried working with -E quote=... as well? Otherwise I would have to look into how the output of values you refer

2019-02-13 13:47:24 +0000 commented question how to use tshark to divide a packet into several records?

I assume you use -T as well? Have you looked into -E, the field print options?

2019-02-12 18:10:43 +0000 commented question RTP stream packet loss

Are there any jumps in the sequence numbering?

2019-02-10 14:09:17 +0000 received badge  Rapid Responder (source)
2019-02-10 14:09:17 +0000 answered a question Possible to add WHOIS IP in statistics / overview?

This sounds nice, but carefully read the terms and conditions for access to the WHOIS database and you'll see in general

2019-02-09 10:42:03 +0000 commented answer MAC Locally administered address - Resolved names

You're right (didn't have coffee yet :) ) It matches Server-15, not the virtual server address. Note the netmark (/16)

2019-02-09 08:24:15 +0000 received badge  Rapid Responder (source)
2019-02-09 08:24:15 +0000 answered a question MAC Locally administered address - Resolved names

These resolutions come from the well-known-addresses file, called 'wka'. And if it was 02:0F:B5:xx:yy:zz it must have sa

2019-02-07 12:49:16 +0000 commented question How can I parse or convert a .pcapng file?

Take a look here for the spec. And here you'll find the download

2019-02-06 12:51:54 +0000 received badge  Rapid Responder (source)
2019-02-06 12:51:54 +0000 answered a question How would I know if the bandwidth of the network traffic has an issue?

On a generic question like this only a generic answer can be given. The amount of traffic on a network becomes an issue

2019-02-05 09:16:09 +0000 commented question My Save and save as are grayed out

A little more context would be helpful in understanding what you ask for.

2019-02-04 17:33:36 +0000 commented question Need help in interpreting the wireshark log

Not sure why you think this is a networking issue. What does "label-by-label printing instead of batch/continuous printi

2019-02-01 19:44:51 +0000 commented question 00:00 Source Address 00:00 Destination Address 0x0000 Protocol 342 length

"I have searched for 00:00:00:00:00:00 mac on all the switches...", but did you find any?

2019-02-01 07:14:41 +0000 commented question Upgraded to windows 10, seeing far more accurate & detailed info under "Transport Address"?

Please specify what 'accurate' means in your observation.

2019-02-01 07:13:16 +0000 commented question How do you view all comments to an answer given to a question on the old Wireshark OSQA Ask site?

No problems here when trying from a MBP, Safari 12.0.2.

2019-02-01 07:09:30 +0000 answered a question Ascii dissector non-constant length

You should take this up on the [email protected] mailing list

2019-02-01 07:09:30 +0000 received badge  Rapid Responder (source)
2019-01-29 22:11:37 +0000 answered a question How do I install wireshark legacy on mac?

Not sure if the dual install option was ever there for macOS. You would have to roll back to 1.12 to get the GTK+ (legac

2019-01-29 22:11:37 +0000 received badge  Rapid Responder (source)
2019-01-29 22:07:06 +0000 commented question cara membaca hasil summary di wireshark 1.12.7

Can you post your question in English, as that's the language most commonly used on this site?

2019-01-26 08:18:44 +0000 commented answer Another filter question

He might have to capture filter like that anyway, since "losing the wifi connection" suggests to me a problem at the MAC

2019-01-24 07:37:26 +0000 received badge  Rapid Responder (source)
2019-01-24 07:37:26 +0000 answered a question Dissector preferences with alternative representations

To go trough the list: Two fields is possible, of course. The update otoh will only happen when you apply the preferen

2019-01-24 07:29:25 +0000 edited question Dissector preferences with alternative representations

Dissector preferences with alternative representations I've got a custom dissector written in Lua. The protocol has encr

2019-01-18 07:03:19 +0000 received badge  Rapid Responder (source)
2019-01-18 07:03:19 +0000 answered a question ipv4 and ethernet only

To stop displaying IPv6 packets you enter the display filter !ipv6 and apply that.

2019-01-15 09:27:45 +0000 commented question How to download wireshark to raspbian, can't seem to find the file?

Please elaborate how you install the program. This should be no different than installing other Debian/Raspbian package

2019-01-14 18:45:07 +0000 edited question I do not see the SIP message Trying

I do not see the messages trying wireshark version 2.6.6 Hello, Install the new version of wireshark and I do not see t

2019-01-11 07:44:15 +0000 edited question Wireshark Portable not autoinstalling WinPCAP

Wireshark Portable not autoinstalling WinPCAP I'm having an issue where the Wireshark portable installer does not automa

2019-01-10 20:27:36 +0000 commented question Receive RST which is not found on the other side of the communication

Router or switch not so much, but firewall or IDS could modify/insert packets to reach their objective.

2019-01-09 10:31:54 +0000 commented question Receive RST which is not found on the other side of the communication

The easiest answer to the question "try to understand why I receive a RST" is "because an intermediate node inserts it".

2019-01-09 10:21:24 +0000 commented question displayed packets unmatched when trying to export

Could you add the version number, not just the build info? I assume it's a reasonable current 2.6 version?

2019-01-09 10:18:37 +0000 edited question displayed packets unmatched when trying to export

displayed packets unmatched when trying to export Hi, I notiched that the # of displayed packets is not the same as it

2019-01-07 18:25:05 +0000 commented question VoIP extract of second part of a call

Go to menu analyze, enables protocols and search for rtp_udp. Enable that and see how the UDP packets of the 'second par

2019-01-05 18:00:59 +0000 commented answer Large RTP packet analysis - Wireshark misreporting statistics

The Wireshark RTP analysis was mainly designed for handling of PCM encoded voice streams. In order to be better suited t

2019-01-02 19:11:22 +0000 commented answer SIP log file conversion into PCAP format file

Convert what? Without any information on the layout of the SIP log file you are referring to there is no way of knowing.

2019-01-02 12:27:36 +0000 commented question wireshark not capturing FTP on en0

Just tried the same thing, connecting to ftp://ftp.cc.umanitoba.ca/ (without any router blocking this of course) and it

2019-01-01 22:54:00 +0000 commented question wireshark not capturing FTP on en0

So capturing works, you're seeing network traffic as expected. What are your filter expressions? What happens when you

2019-01-01 19:08:07 +0000 answered a question SIP log file conversion into PCAP format file

Your input file has to adhere to the required format for text files in order for it to be converted into a PCAP format f

2019-01-01 19:08:07 +0000 received badge  Rapid Responder (source)
2019-01-01 19:02:29 +0000 edited question SIP log file conversion into PCAP format file

sip log file conversion into .Pcap Dear All, anyone please help me out, how to convert SIP log (TEXT) file into .pcap f

2019-01-01 19:00:56 +0000 edited question I have hex dump of LTE signalling messages . How to parse messages, without installing whole Wireshark setup on my machine?

I have hex dump of Lte signalling messages . How to parse messages , without installing whole Wireshark setup on my mach