André's profile - activity

In the Postman GUI you can view the HTTP headers send and received, in the tab labelled "Headers". When using curl the

Is it supposed to communicate to the outside world (Ethernet interface) in plain text? Or is it encrypted (using TLS)? I

Use the 'Decode As' functionality to force decoding as the protocol of your choice. Useful when the heuristic selection

Please open an issue at https://gitlab.com/wireshark/wireshark/-/issues/

Next to the MonitorModeEnabled = 1 setting in the registry, as described on the Intel page, you also need to disable the

The npcap loopback adapter can be used to capture traffic on the loopback interface. Thus traffic that remains inside yo

What Operating System are you using? E.g. on Windows there is a uninstall-wireshark.exe in the directory where Wireshar

The Windows native command ipconfig /all will most likely also show interfaces with names ending with an asterisk. (So i

Without the -D option, but with -i option, all packets are considered inbound. So for outbound they must be swapped. Yo

This should work on both PCs, with either English or German locale. By resetting the locale to the default ("C"), thus

Not a Wireshark question. Try googling 'slytechs' instead.

Not directly. One option is to send the traffic through a proxy like mitmproxy, another is to use a Remote Virtual Inte

This display filter will show all the first captured packet per TCP stream: tcp.time_relative == 0 Thus including strea

What happens when you put it in a folder without a space in the name? Are you using a pathname in double-quotes to laun

Which version of Wireshark are you trying to install? One google search on your text and I got: https://ask.wireshark.or

There is already an issue open for that: https://gitlab.com/wireshark/wireshark/-/issues/19451 Bottom line: don't selec

There is no option to read the display filter from a file instead. The Windows command line length is limited to 32,767

There is no option to read the display filter from a file instead. The Windows command line length is limited to 32,767

Either the file you try to open is corrupt or it does not contain a proper pcap header. On Linux the command file is av

Either the file you try to open is corrupt or it does not contain a proper pcap header.

To see your public IP-address go to https://api.ipify.org/ When doing this from behind a device that does NAT (Network

To see your public IP-address go to https://api.ipify.org/ When doing this from behind a device that does NAT (Network A

Actually you are blocking IP-ranges, not counties. With the current shortage of IPv4 addresses, IP-ranges are traded mo

Actually you are blocking IP-ranges, not counties. With the current shortage of IPv4 addresses, IP-ranges are traded mo

The very first HTTP GET request you posted here is for a CSS (base.css). It appears that this is after the actual login.

Wireshark version >= 4.2 should be compiled using Qt6. See https://www.wireshark.org/docs/wsdg_html_chunked/ChSetupWi

(or by using the any interface.)

Yes, select the "Adapter for loopback traffic capture" interface on Windows. I am of the opinion that this wouldn't

I see 2 TLS sessions. The first: The client (browser) closes the session after 30 seconds (frame 809). Most likely a t

I see 2 TLS sessions. The first: The client (browser) closes the session after 30 seconds (frame 809). Most likely a t

I see 2 TLS sessions. The first: The client (browser) closes the session after 30 seconds (frame 809). Most likely a t

argv[3] is a pointer, it is NOT a char array to store a string in. And argv is declared as char* argv[], which means "an

I guess you have to ask Akib Hossain Omi for support on his project. If you have problems compiling using the Wireshark

argv[3] is a pointer, it is NOT a char array to store a string in. And argv is declared as char* argv[], which means "an

argv[3] is a pointer, it is NOT a char array to store a string in. And argv is declared as char* argv[], which means "an

So there is an F5 and Netscaler in the network path. If the F5 is in full-proxy mode and the Netscaler does deep-packet

No. It is not a hub. See https://wiki.wireshark.org/CaptureSetup/Ethernet#switched-ethernet

If I read the VM documentation correctly a "distributed port group" is just a virtual switch. Then it makes sense that t