grahamb's profile - activity

The first Google search result for "TCP Zero Window" shows we have a wiki page for that: TCP Zero Window.

The reference site for the Wireshark source code is currently here. The nr-rrc dissector is an "asn1" dissector where t

Looks to me like a SYN-ACK reflection attack, an inefficient form of DDOS. Some recent analysis of such attacks from Ak

You're welcome, but this is yet another case of the npcap service stopping for unknown reasons. Maybe we should add som

output: SERVICE_NAME: npcap TYPE : 1 KERNEL_DRIVER STATE : 1 STOPPED WIN32_EXI

This seems like yet another duplicate question about lack of interfaces when using npcap. See here for the most recent

What do you mean by "not detecting my network"?

It's obviously 42.

You're running with a slightly out of date version of npap (shouldn't be an issue). As with quite a few similar questio

version info: Version 3.0.6 (v3.0.6-0-g908c8e357d0f) Copyright 1998-2019 Gerald Combs <[email protected]> an

Open the menu item Help -> About Wireshark. On the Wireshark tab highlight the text with the mouse and press Ctrl +

output: LANG=en_US.UTF-8 LANGUAGE=en_US LC_CTYPE="en_US.UTF-8" LC_NUMERIC=es_AR.UTF-8 LC_TIME="en_US.UTF-8" LC_COLLATE=

LANG=en_US.UTF-8 LANGUAGE=en_US LC_CTYPE="en_US.UTF-8" LC_NUMERIC=es_AR.UTF-8 LC_TIME="en_US.UTF-8"

OK, what's your locale, i.e. the output of locale?

What OS and what shell are you running this on?

These are the output of the commands total 0 drwx------ 3 root staff 96 May 30 16:55 . drwxr-xr-x+ 33 luke staff 1056 N

Could you start a Terminal and give us the output of the commands ls -la /Users/luke/.config and ls -la /Users/luke/.con

The SML dissector only dissects traffic over UDP or TCP. You can use text2pcap to create a pcap file. By using the opt

You could try installing a standard release and check with that, else you'll need to share the capture.

Version 3.0.5.lte.1910.01 (v3.0.5.lte.1910.01-0-gd4e5a60985dd) That looks like a custom build, not a standard rele

You have to upload the capture to a public share, e.g. Google Drive, DropBox etc. and post a link back here.

Duplicate of https://ask.wireshark.org/question/12986/unique-id-of-a-packet/

Wireshark version, OS, capture file?

You need to set the dissector port (defaults to 0), either by editing the dissector preferences (Edit -> Preferences

You need to set the dissector port (defaults to ), either by editing the dissector preferences (Edit -> Preferences -

dissector doesn't work Hello, I try to comprehend this example: https://wiki.wireshark.org/SML But for me the dissec

disselector desn't work Hello, I try to comprehend this example: https://wiki.wireshark.org/SML But for me the disse

Unfortunately not. If the installation is allowed to run then it will only update if required, however it must run.

That number makes more sense, its 0x800704EC in hex which now looks like a Windows error. According to the MS error loo

Can you confirm the error code, it looks a bit odd?

How are the laptops connected to the network, wired or wireless?

Those "errors" look to me like WinDbg reporting modules that don't have symbols available. What happens if you "continu

Wireshark requires the Universal CRT platform component to be installed and until now I thought that this was installed

I googled UDP "27127" and UDP "1740". Note the quotes around the port numbers to only show pages that included those sp

If your environment does PLC work then these might be possible answers: The 1740-43 ports seem to be used by Codesys PL

Can you share a capture containing the packets in question?? Use a public file share such as Google Drive, DropBox etc.

Note that the preference defaults are the same for all platforms, although they may have changed between versions so it'

I ran wireshark with windbg i found following issue. ModLoad: 0a5d0000 0a985000 D:\wsbuild32\run\RelWithDebInfo\plugi

Extra ields are specified in the command by adding a -e argument with the field name, use multiple -e field.name argumen

Use the menu item File -> Export Specified Packet. Guidance for the Packet Range fields this dialog can be found in