Skip to main content

All Questions

Filter by
Sorted by
Tagged with
0 votes
1 answer
1k views

network traffic capture between 2 vms

I am not a pro with networking and am trying to understand the same better. Below is the setup I have. Host system is OSX running VirtualBox. 2 virtualbox VMs (VM1 and VM2), each running Ubuntu ...
qre0ct's user avatar
  • 123
0 votes
1 answer
2k views

nmap repeats the scan to a specific port multiple time

I scanned a subnet (16 hosts) while dumping the network traffic with wireshark. I did it 2 times and I noticed that in the traffic there is the normal SYN-SYN/ACK and SYN-RST from open/closed port, ...
Possa's user avatar
  • 185
-6 votes
1 answer
2k views

How to monitor all network traffic [closed]

I have installled wireshark on my server but can only monitor traffic through the local nic but all network traffic does not go through the server. I would like to monitor all network traffic. Are ...
John Fleming's user avatar
0 votes
1 answer
692 views

tshark duration of a conversation for a ip address

i can retrieve the follow info from a .pcap : ================================================================================ IPv4 Conversations Filter:ip.addr==1xx.1xx.0.1xx ...
drd0sp.pt's user avatar
1 vote
2 answers
6k views

Wireshark does not capture HTTP on 8080

I am running Wireshark on my linux machine and i have simple python web server running on localhost:8080 I am capturing only local port 8080. When i open browser on localhost:8080 wireshark captures ...
martin85's user avatar
  • 115
1 vote
1 answer
3k views

ICMP Data Field Modified - What does it Mean?

Normal ICMP Data fields are composed of a pretty standard 32 byte string of alphabet characters. abcdefghijklmnopqrstuvwabcdefghi I have captured a series of ICMP echo requests using WireShark with ...
Lucretius's user avatar
  • 459
2 votes
4 answers
698 views

How can i measure the load of a WAN Connection with Wireshark?

I have a 100 Mbit WAN connection and want to check the load on it for a week. So I put a hub (10/100Mbit) behind the WAN connection and connected a laptop with wireshark on it. Here is now my ...
Fake4d's user avatar
  • 613
53 votes
7 answers
287k views

How can I filter https when monitoring traffic with Wireshark?

I want to observe the HTTPs protocol. How can I use a Wireshark filter to do that?
Amirreza's user avatar
  • 734
1 vote
1 answer
6k views

What causes the issue (possibly packet loss) in this scenario

I'm trying to diagnose a network related problem - please understand these points before suggesting an answer (apologies if more information is required, I will add anything people ask). We have a ...
Mr Shoubs's user avatar
  • 373
5 votes
5 answers
26k views

How to capture Wireshark packets when using a switched network in Windows

I’ve been asked by our SIP trunk provider to run a Wireshark trace on the network when we receive calls. The issue I’m having is that if I run Wireshark from a laptop plugged into the main switch I ...
best's user avatar
  • 301
3 votes
3 answers
7k views

Determine What Process is Generating Network Traffic (Windows Server 2003)

I've got a print server in our Windows 2003 domain with a lot of print queues on it. We are seeing a significant amount of SNMP scans coming from this server which we think are unnecessary. ...
J.Zimmerman's user avatar
  • 1,107
19 votes
5 answers
41k views

Is there a way to get wireshark to capture packets sent from/to localhost on Windows?

Is there a way to get wireshark to capture packets sent from/to localhost? When I monitor traffic going from my computer to another, or from another computer to my computer, then it works. But ...
Brian R. Bondy's user avatar