salwa1215's profile - activity

TCP segment len There are some packets with TCP segment len which is different to zero and other is equal to zero like

Dont get the NULL length payload from pcap Is there any reason to get the NULL length payload from a pcap file and dont

Thanks for your response. Is TCP Dup ACK considered as a duplicated packets also ? and why I have the same ip.id fo

TCP analysis I need you help to confirm or not theses notions plz. I'm trying to extract some TCP.analysis fields using

how to recognize a duplicate packet in wireshark ? how to recognize a duplicate packet ? in addition that it is marked i

Handshake Modbus/TCP I want to know how is the handshake of Modbus/TCP plz. I have a pcap file in which after each repon

I dont apply for Android. I used it for linux machine. I tested tcp.port==5555 or tcp.port in {5555..5585} but they are

detecting duplication and retransmission How can we distingush duplication from transmission tcp plz ? I undestand that

How detecting a botnet from a pcap file ? I want to know if there is a way to detect a botnet like Ares botnet from a pc

How ip addess are read in wireshark ? Are the ip source address and destination in wireshark the same as in as packet or

How ip address are read in wireshark ? Are the ip source address and destination in wireshark the same as in as packet o

flow is all packets belonging to this quintuplet (src ip, dest ip, src port, dest port, protocol)

How can I get the flow count from a pcap file ? I have a basic question please. I want to know how can get the flows cou

not tcp.port==502 does not work. It remove also all tcp packets

Oh i did think to that. Maybe it will work. I will test it tomorrow and give you a feedback. Thanks

The file is big but packets I dont know. My wireshark version is : 3.2.1

The packets that I want exclude are the modbus/tcp packets

File -> export specify packets and export eitheir dispayed packet or marked parckets (after doing ctrl shift m to mar

remove modbus packets from my pcap file I want to remove the mobus packets from my pcap file and save the results in a f

remove modbus packets/filter modbus I want to remove the mobus packets from my pcap file and save the results in a file.

How can I capture an attack traffic ? I need the community opinion please. For my project, I have to perform some attac

How can I capture a attack traffic ? I need the community opinion please. For my project, I have to perform some attack

Both files are captured in the same time but in two different machine. One machine makes port mirorring traffic and the

how make a diff between two pcap files ? I have two pcap files and I want to make the difference between them. And store

How doing the diff between two pcap file and store de results I want to compare the difference between two pcap files an

Thank you very much It works

Display filter field names in the csv file Hello, I use this command to filter some field from my pcap file and store t