Questions tagged [wireshark]
The network protocol analyzer developed and maintained by the Wireshark Foundation
889
questions
1
vote
1
answer
126
views
Why am I able to send UDP packet larger than my WIFI interface's MTU?
I have written a simple python program to send a UDP datagram.
import socket
client_socket = socket.socket(socket.AF_INET,socket.SOCK_DGRAM)
host_name = socket.gethostname()
host_ip = '1.2.3.4'
print(...
- 191
0
votes
1
answer
72
views
Windows laptop will not turn on after installing Wireshark
I have a Dell XPS laptop running Windows 10. I installed Wireshark from here, including Npcap from the same installer. All the additional options were left default.
After closing the laptop lid for a ...
- 11
0
votes
1
answer
69
views
From a computer connected in Wifi, can I see the traffic of ethernet-connected computers, with Wireshark?
In the following network, if I open Wireshark on ComputerA, can I see the traffic of ComputerB (to internet) with Wireshark?
____________________
| Home router |
| (provided by ISP) |
| 192....
- 1,916
0
votes
0
answers
430
views
ffmpeg - Jitter when streaming audio over RTP
So as a disclaimer, i'm trying to do something with ffmpeg that may be at the limit of what can be achieved. However, even though it's not possible, i would like to understand why.
What I want to do ...
- 101
0
votes
2
answers
106
views
Can my network admin see my traffic over a Flask app?
So I've got a Flask app that connects to the internet to send/receive data. It does so by connecting to a website's API (which has HTTPS). So I'm quite sure the Flask app is HTTP. I connect as 127.0.0....
- 3
1
vote
1
answer
807
views
Trying to understand how WSL2 networking and routing works when pinging google.com, confused
I'm trying to learn networking and i'm still a novice. I'm confused about how the routing is done between the virtual adapter and my wifi card
When I ping google.com from WSL, I can see on Wireshark ...
- 13
0
votes
0
answers
297
views
How to capture packets at the Ethernet layer on a SOCKS5 proxy server?
When I capture packets with tcpdump on an Ubuntu 20.04 VM running a SOCKS proxy server on port 1080, they are often larger than 1500 bytes. My network device has an MTU of 1500, so as far as I ...
- 1
1
vote
0
answers
86
views
kali linux filter by protocol wireshark's pcaps
I spent the last 2h looking for a way to quikly filter pcaps, it seems that it is possible using cmd/bat on windows but I can't find anything for kali linux.
I have a way too big pcap and I want to ...
- 11
0
votes
0
answers
57
views
How do I detect BGP attacks in these Wireshark packets
I received a Wireshark capture file as a task. There are 3 TCP packets for the TCP 3-way handshake to establish the connection and 4 BGP packets.
I received additional information and now I have to ...
0
votes
0
answers
68
views
Wireshark showing packet exchanges with unconnected IPs
Running Wireshark on a PC for network monitoring and I noticed something strange. Application data is being exchanged with websites that are not open in the browser, or on any other device on the ...
- 9
0
votes
0
answers
19
views
Implementing Video streaming restrictions based on hourly usage at home
I'm new at networking, so my question might be basic or naive.
I want to implement restrictions for mobile devices if it is being used to view videos for more than an hour continuously then its ...
0
votes
0
answers
190
views
Wpa PTK and GTK in detail
I have been checking Pairwise and Group Transient keys in a network for security. I understand
PTK is derived from = PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address
...
- 105
0
votes
1
answer
286
views
Configure Virtualbox to capture network traffic between 2 VMs on the same host from another physical machine
My context is:
A physical machine with windows 10 (PC_Physcial_01) that host 2
virtualbox linux VMs PC_VM_01 & PC_VM_02)
An other physical machine dedicated to sniff network traffic
(...
- 1
-1
votes
1
answer
81
views
Why is it written in nmap official doc that -sL does not send any packet, when it actually send them?
Sniffing with wireshark, I see a bunch of ARP, and DNS requests.
So why in the official doc it's written this:
The list scan is a degenerate form of host discovery that simply lists
each host of the ...
- 254
0
votes
0
answers
213
views
Setting MacOS Airport Utility into monitoring multiple channels
I am using MacBook Pro 14' 2021 M1 Pro with MacOS Ventura 13.3.1. I would like to use wireshark in monitor mode with wifi interface. I have read, that I can switch 802.11 channels with the command:
/...
- 1