grahamb's profile - activity

How to add wireless encryption to the display Hello, I would like to add the wireless encryption(wep/wpa/wpa2) to the d

End device goes offline randomly Hello, Currently we are having issues with a surtain type of end device that goes offl

Lots of TCP retransmission and TCP ACKed unseen segment Windows Server 2019 Hi everyone, We are experiencing performanc

You can post the capture in a public share and then add a link to it back here. I can't spot the issue, but you could c

Not sure. Are you selecting "MPLS Protocol" in the "field "column and then setting the MPLS label value (202311) in the

Have you tried using "Decode As..." on the packets to tell Wireshark what protocol that MPLS label refers to?

Hello, I cannot decode ethernet traffic data which is encapsulated inside MPLS. How can I do to decode such encapsulated

You mention capture filter a few times, do you actually mean interface list, i.e. the list of interfaces displayed under

Ms Edge (and many other Windows applications) uses the SChannel TLS config data from the registry to determine which TLS

Ms Edge (and many other Windows applications) uses the SChannel TLS config data from the registry to determine which TLS

Ms Edge (and many other Windows applications) uses the SChannel TLS config data from the registry to determine which TLS

No, the time column represents the time at which the capturing mechanism recorded the packet being transmitted (or recei

Need Help with wireshark I've been struggling with WIFI issues for two years now. It started with an email from hackers

For malware issues Wireshark is usually not the answer and so this question of off-topic. Please seek help from a malwa

From your comments you're using WSGD for your dissector, support for that is over there.

See Issue 17577.

Please raise an issue over at the Wireshark GitLab instance attaching captures and any credentials\keying material.

Not currently. Enhancement requests can be raised over at the Wireshark GitLab instance.

Likely to be because the packets contain a TCP RST. You can check which coloring rule is being used by expanding the fr

Red Flag "\Device\NPF_Loopback" Hi, i hope anyone can tell me why wireshark flags the packages on the Screenshot in re

Red Flag "\Device\NPF_Loopback" Hi, i hope anyone can tell me why wireshark flags the packages on the Screenshot in re

Your question isn't clear and your image is missing. Please post your image on a public file share, e.g. Google Drive,

Ref Flag "\Device\NPF_Loopback" Hi, i hope anyone can tell me why wireshark flags this packages in red. Many Thanks

From the menu, Analyze -> Enabled Protocols, start typing "ecpri" in the search box and then check the box next to th

Obviously if the state you require isn't in the capture, then you can't complete dissection. The dissector should fail

Try the Qt offline installers, or go to the Qt Open Source page and click the link at the button to download the on-line

Try the Qt offline installers.

You should look at conversations and request\response tracking. A conversation is a way to build up state from all the

npcap support is over there.

I didn't read the question properly and the comment from @Jaap highlighted the issue, in that the user wants the occurre

Is it possible to use ssh dissector wireshark(edit->preferrences) to decrypt encrypted wireshark traffic, is yes plea

Decryption of SSH traffic is a work in progress and also requires some effort with the ssh client to extract the keying

Using the display filter: (ip.src == 1.1.1.1) && (tcp.flags.fin == 1)

You don't need to access the function directly, you do it indirectly via a dissector handle obtained from either a regis

The "extension" mechanism for Wireshark dissectors is via dissector registration and dissector tables to minimise direct

Given the stack you describe, why can't your dissector call the bluetooth top-level dissector (dissect_bluetooth) which

Sorry for being an idiot, but I don't follow the protocol stack you have. Are you saying you have something like: you

I'm not very familiar with bluetooth so might be missing the point as to where your protocol fits in, but the bluetooth

Support was added (3GPP NAS: upgrade dissector to v16.6.0) Nov 13, 2020 but not backported to the 3.4 branch. The field

Can dumpcap (the part of Wireshark that communicates with npcap) list the interfaces? Using a command prompt try the fo