Questions tagged [wireshark]

For questions about Wireshark, a packet analyzer

Filter by
Sorted by
Tagged with
19 votes
2 answers
31k views

Traceroute - every packet has TTL == 1

I'm working on Wireshark lab-IP in Computer networking - A top down approach and I don't understand why every packet that normally expired has a TTL of 1. Here is my Wireshark capture file. https://...
ksp0422's user avatar
  • 193
27 votes
4 answers
114k views

How can I capture traffic on Cisco IOS switches?

For investigating a problem in client to server communication, I need to capture packets for analysis. However it's not allowed to install a packet analyzer, such as Wireshark or tcpdump, on client or ...
Stefan's user avatar
  • 3,374
9 votes
1 answer
10k views

ARP request with unicast MAC?

Regarding ARP requests, I got to believe that the destination MAC address was in all situations the broadcast address. Yet I got across this Wireshark capture: I just cannot understand the 3rd ...
PesaThe's user avatar
  • 279
8 votes
2 answers
18k views

How can I capture traffic on a Brocade XMR, MLX, CER or CES?

How can I perform a packet analysis on traffic flowing through a Brocade XMR, MLX, CER or CES without having to install a specific software on any of the remote endpoints ?
Benjamin A.'s user avatar
  • 1,687
27 votes
2 answers
34k views

Difference between sniffer tools

I am unsure what the following networking tools do. They all seem to do a similar thing. First some background. I am familiar with cisco IOS. I am doing some linux networking experimentation with ...
s5s's user avatar
  • 373
7 votes
2 answers
7k views

Why Don’t Probe Requests for Specific SSIDs include BSSIDs

I'm looking at WLAN traffic captured from wireshark on monitor mode and notice that out of the 67,000 probe requests, 99.08% have the destination set to FF:FF:FF:FF:FF:FF (Broadcast). The thing is, ...
JHAWN's user avatar
  • 71
7 votes
2 answers
2k views

Monitoring without Port Mirroring

A quick overview of the problem We've been experiencing some issues with our bandwidth usage lately which I fear may be due to misuse (whether intentional or not) of our internet in the office. I ...
aaroncatlin's user avatar
7 votes
1 answer
44k views

Troubleshooting "TCP Zero Window" Issues

I'm currently having a problem troubleshooting a trading application. Let me give a simple diagram of the current network setup (Gov't Stock Exchange Network Router)X-->(256kbs Leased Line)<--X(...
Rufi's user avatar
  • 111
4 votes
1 answer
4k views

Creating a Network Diagram with .pcap

I have a Wireshark .pcap Capture of around 500k packets and I would like to enumerate a Network Diagram with all the Routers, Switches, PCs etc. Is Wireshark capable of such procedure or is there any ...
Jonathan Davies's user avatar
4 votes
3 answers
9k views

Why do i only see QUIC and not UDP during capture in wireshark?

I've been using wireshark and noticed that I no longer see UDP but QUIC, why is this the case?
夢のの夢's user avatar
1 vote
1 answer
89 views

Get Avarage network trafic data in MB [closed]

Currently i am using a MiroTik router, that has build in a data trafic graph. Its werry well working, but it cant be saved and it shows only last 24h/ last week/ mounth /year. I would like to have ...
Shawn's user avatar
  • 13
0 votes
1 answer
1k views

Unable to capture http request in Wireshark [closed]

I am working in wireshark. I am monitoring the wifi traffic on the same network. We have 6 pc's there and one machine was installed on wireshark to capture wifi traffic. I got my team mates Ip ...
toastmaster's user avatar