grahamb's profile - activity

The ip.stream field was added in Wireshark version 4.4.0 (see here), what version are you using?

The info you posted above in your question was using tshark. If using the GUI version, i.e. actual Wireshark, then it's

For tshark use: tshark -z io,phs -r <path\to\capture file>

From the menu options.

What does the Statistics -> Protocol Hierarchy dialog show? I assume you can see web sites if you open a browser?

If you capture on interface eth0 do you see packets other than UDP?

cant get other packets im on debian and i cant get other packets other than udp and the udp packets are just my packets

Can you explain your capture environment? Do you see any packets other than UDP?

I'm getting Malformed packet when I see wireshark Log Here is the message I got 12082 208.239790000 100.64.10.6 10

If the issue is a DLL not found, either the DLL isn't present, e.g. check in the Wireshark install directory, or there's

All depends on what info you're looking for. systeminfo.exe gets some info, including NICs as text and msinfo32.exe get

Is the traffic encapsulated, e.g. IP over something over IP?

Does RFC 5761 have any bearing here?

I have problems with DNCP and have breakdowns on internet-conection. Please could you help how to solve this problems:

You would probably need to contact the Wireshark Foundation about that. There has been testing on the questions and pro

Code excerpt: type_field = ProtoField.uint8("myProtocol.type", "type", DEC) myField1 = ProtoField.uint8("myProtocol

DissectorTable.get("mpls.label"):get_dissector(2097) returns nil I'm attempting to build my first LUA dissector. Specifi

http-server from node js uses openssl not SChannel so should be able to send keying material to the log file.

httpserver from node js uses openssl not SChannel so should be able to send keying material to the log file.

Support for CHACHA20-POLY1305[RFC7634] is missing in ESP encryption algorithm list In the drop down menu of ESP preferen

all entries in the local https trace is of type tcp like 17 2.328392 10.0.0.12 10.0.0.32 tcp 74 4250

Can you supply more info about the VPN and the vendor?

Or the application is using SChannel for TLS and that does not emit to SSLKEYLOGFILE

How to decrypt ISAKMP / IKEv2 traffic by using tshark? Hi all, I want to decrypt a .pcap which has an IPsec communicati

You can try loading the capture as a file, View -> Reload as File Format/Capture (Ctrl + Shift + F) to examine the pc

That version of Wireshark is obsolete, EOL was May 2024. Unlikely to help if the capture file is really damaged, but ca

"Answer" moved to a question comment.

Does the User Guide chapter on Exporting Data help? Section 5.7.2 discusses CSV as an option.

I do not have enough points to upload a file. Here it is the all frame hex dump of for a ZCL GetSampledData pkt 0000

zigbee zcl payload filed Sample Start Time doe not get decoded The payload field Sample Start Time for Zigbee pkt GetSam

Exporting to CSV synphasor (PMU) data Hello, I'm trying to export to CSV some data from PMU (synphasor). When I chose sy

zigbee zcl payload filed Sample Start Time doe not get decoded The payload field Sample Start Time for Zigbee pkt GetSam

Error message from child: "File type is neither a supported pcap nor pcapng format. (magic = 0x333a3930)", "Please repor

Noted, I have tried using multiple permutation/combinations of cmd syntax including without plink, however I was getting

Noted, I have tried using multiple permutation/combinations of cmd syntax including without plink, however I was getting

Noted, I have tried using multiple permutation/combinations of cmd syntax including without plink, however I was getting

SSL connection failing Help! We converted to a new IBM iSeries (AS400). Since the conversion I can't connect to our EDI

Not really a Wireshark question, you'll need to look for a WSL support service.

Many thanks for that very useful information, will look at it in detail. Perhaps I should be more specific about what

Many thanks for that very useful information, will look at it in detail. Perhaps I should be more specific about what

Many thanks for that very useful information, will look at it in detail. Perhaps I should be more specific about what

I think the Pi's are limited to WiFi 5, (IEEE 802.11.ac).

Wireshark can't really help here, as not all LAN traffic may be passing the capture point. There are various network mo

Are you able to name the VPN service?

Is the problem in the "In some tool that I'm using" element rather than Wireshark? Wireshark needs two things here; the

Does the Wireshark Wiki page on Protobuf help?

Wireshark 4.4.5.0 Crash is this known Hello I've just upgraded to Wireshark 4.4.5.0, the application starts ok, howev