Eddi's profile - activity

Private Membership for the Wireshark Foundation? Since the Wireshark Foundation is now a done deal I wonder, if there ar

Do you have a trace file? That JSON file is not really helpful. Server 2003 only supports SMB v1. The newer Windows ver

Do you have a trace file? That JSON file is not really helpful. SMB (or, hopefully, SMB2/3) can be quite picky during t

Do you have a trace file? That JSON file is not really helpful. SMB (or, hopefully, SMB2/3) can be quite picky during t

Do you have a trace file? That JSON file is not really helpful. SMB (or, hopefully, SMB2/3) can be quite picky during t

IP over LLC with a twist Dear Wireshark Community I stumbled over a trace file with an non-standard version of IP over

Most remarkably, the slow transfer file shows quite a number of retransmissions, where the fast transfer does not show s

Just a few ideas: Is the disk full or very fragmented (note that fragmentation is less of an issue with SSDs) Please c

How about this: tshark -i 1 -f "ether dst 00:11:22:33:44:55" -i specifies the interface. You might want to change the

Can Wireshark decrypt Windows RMI packets? I am looking at a trace file with Windows RMI packets (HTTP on TCP port 5985)

Can Wireshark decrypt Windows RMI packets? I am looking at a trace file with Windows RMI packets (HTTP on TCP port 5985)

Can Wireshark decrypt Windows RMI packets? I am looking at a trace file with Windows RMI packets (HTTP on TCP port 5985)

Can Wireshark decrypt Windows RMI packets? I am looking at a trace file with Windows RMI packets (HTTP on TCP port 5985)

Working with a trace file you could use the menu function Statistics -> Endpoints and look up the counter. On a live

The story about "all clients need the same operating system" sounds weird. IMHO this is a matter of the samba client con

Did you check the Event Log? Relevant information can usually be found either in the Application or System Event Log

You need the session key, which is determined individually for each client and each share (or TreeConnect). Recent SAMB

Hello aks First of all, Wireshark is good for network analysis, it's not an IDS. However, Wireshark is super-useful to

Hello aks First of all, Wireshark is good for network analysis, it's not an IDS. However, Wireshark is super-useful to

Hello aks First of all, Wireshark is good for network analysis, it's not an IDS. However, Wireshark is super-useful to

Are you running Wireshark on the DHCP client, or is this another host? If you run Wireshark on the DHCP client: Does th

I am not aware of a plugin. Depending on your requirements, you might get away with the command line tool tshark. For st

You are looking at an SMB feature called multichannel. SMB tries to optimize network traffic by spreading traffic over m

You are looking at an SMB feature called multichannel. SMB tries to optimize network traffic by spreading traffic over m

Hello Pauli Broadcast messages happen on Layer 2 or Layer 3. Try this Wireshark display filter for Layer 2 broadcasts (

Hello KBolt The very first packets of your trace look like a capture taken from a SPAN port. Depending on the configura

Hello ITgustl and welcome to ask.wireshark.org. To visualize the broadcast load per VLAN I highly recommend the I/O gr

Nowadays, a lot of traffic is encrypted. So, a full packet capture is not very useful. Packet slicing could be an optio

I was privileged to take a look at the trace from an SMB level. Here are a few observations from the trace: In general

The screenshot suggests that the systems use SMB (not SMB2) to exchange data. Most applications make blocking calls whe

Hi Tom A wonderful mystery! Could you share a few more details: Any chance to find out the version of Windows is the

Hi Tom A wonderful mystery! Could you share a few more details: Any chance to find out the version of Windows is the

File shares accessed by SMB, SMB2 or SMB3 can be replicated over multiple servers. The underlying shares are arranged in

I think the most interesting part is the handshake between the computer and the display device. Any ideas how to capture

Excellent question! Windows requires that Bluetooth and WiFi, both interfaces have to be active to start a Miracast con

has any one seen this grouping before ... is it a hub or some one on my site... i have had people ordering amazon items

has any one seen this grouping before ... is it a hub or some one on my site... i have had people ordering amazon items

has any one seen this grouping before ... is it a hub or some one on my site... i have had people ordering amazon items