Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [wireshark]

Wireshark is an open source Network Protocol Analyzer under GNU License.

507 questions
2
votes
1 answer

Debugging slow SMB packets from a specific desktop client

I'm having some serious problems locating a slowdown, and I hope you could assist me with this. We have an office network with ~50 clients and a main file server running Windows Server 2008 R2 Standard (SP1). For one specific client (Windows 7, SP1)…
Anders Arpi
  • 121
  • 6
2
votes
3 answers

Cannot connect to SQL Server and Wireshark don't listen anything

I'm trying to connect to a SQL Server from outside the LAN, so I opened port 1433 (default SQL Server port) in the firewall. On the server side I'm listening with Wireshark and I can listen ping (filtering by icmp or ip address) from ip X but…
sr.u
  • 21
  • 5
2
votes
1 answer

Why can't I start the WinPCap npf service when I'm the administrator?

I recently installed Wireshark on a Win 7 host, but now it won't let me start the NPF service. I get: C:\Windows\system32>net start npf System error 5 has occurred. Access is denied. That's strange, because I am in the local admins group, and the…
David Bullock
  • 821
  • 3
  • 15
  • 21
2
votes
1 answer

Wireshark Display Filtered for Unreplied ICMP Echo Packets

Is there a wireshark display filter that will find ICMP echo requests that didn't have a reply?
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
2
votes
4 answers

How can i measure the load of a WAN Connection with Wireshark?

I have a 100 Mbit WAN connection and want to check the load on it for a week. So I put a hub (10/100Mbit) behind the WAN connection and connected a laptop with wireshark on it. Here is now my question - can i print a report or graph with the dump i…
Fake4d
  • 603
  • 7
  • 10
  • 16
2
votes
1 answer

Capture HTTP GET requests

In the Wireshark wiki is an example for filtering HTTP GET requests: Capture HTTP GET requests. This looks for the bytes 'G', 'E', 'T', and ' ' (hex values 47, 45, 54, and 20) just after the TCP header. "tcp[12:1] & 0xf0) >> 2" figures out the…
cuh
  • 125
  • 1
  • 6
2
votes
2 answers

wireshark not seeing all packets on WiFi

I'm using Wireshark on OSX, trying to sniff my home network over WiFi. While I can see packets that are sent to/from the host I'm sniffing on, I'm not seeing anything else that goes over the WiFi. It's like I'm not in promiscuous mode or something…
Caffeine Coma
  • 419
  • 1
  • 5
  • 13
2
votes
5 answers

How can I use Wireshark to analyze slow Active Directory logins?

This page seems to imply that Wireshark can only begin capturing after boot, but it looks like someone else has run into this problem before and didn't get anywhere. It doesn't necessarily have to be Wireshark, I just need to figure out why some AD…
user65712
  • 387
  • 1
  • 8
  • 17
2
votes
1 answer

Error while decrypting https traffic in Wireshark

I configured Jetty with a self-generated private key and cert after a long struggle. Now, I'm having trouble decrypting the HTTPS traffic from the Jetty server that I captured for inspection. The following is the error from Wireshark's SSL log (file…
Srikanth
  • 189
  • 1
  • 3
  • 8
2
votes
3 answers

Wireshark won't pick up packets sent from localhost to localhost via network

I'm running on Windows and trying to get Wireshark to pick up my network traffic. It picks up all outbound and inbound traffic fine, except for a client/server I'm running on my local system. As it is, even when I'm sending packets through my LAN…
Rushyo
  • 227
  • 2
  • 9
2
votes
1 answer

Extract files from traffic captured with WireShark

Is there a way to extract image, video files from WireShark capture files? Is there a tool to achieve this?
Élodie Petit
  • 143
  • 1
  • 6
2
votes
3 answers

Debugging UPnP / DLNA via Wireshark

Is there any way to parse / interpret the XMLs sent as part of a DLNA / UPnP using Wireshark, or any other network sniffer? I can get the raw packets, but it would be nice to see them parsed, to make debugging easier.
Mikeage
  • 2,741
  • 6
  • 26
  • 37
2
votes
1 answer

WireShark - wireshark trace traffic from my local browser to a local .net application I have with a HttpListener? (e.g. local to local)

Can wireshark trace traffic from my local browser to a local .net application I have with a HttpListener? (e.g. local to local) I can't seem to detect this traffic at the moment with wireshark. Is there a way to do it? thanks
GregH
  • 245
  • 3
  • 13
2
votes
0 answers

TShark - Include decrypted tls data in output

I'm trying to read https requests from an application and while I can somewhat make sense of the data using wireshark, I cannot make tshark output the data as I want it. One of the problems I've noticed is that the content-type from the server is…
Busata
  • 121
  • 1
2
votes
1 answer

Duplicated UDP packets sent

We have a few applications that we develop in my company that talk to some hardware via UDP. Recently, we started having issues using these applications on some of our machines (hardware basically refusing the connection with the client). After…
harveyAJ
  • 121
  • 4
1 2 3
…
33 34