Packet Capture

What Can Wireshark Really Tell You About an Encrypted Signal Conversation?

Networking and Computing Tips and Tricks / By

Views: 918Signal has a well-earned reputation as a secure messaging application. Messages, voice calls, video calls, files, and other Signal-to-Signal communications are protected using end-to-end encryption. Signal states that message and call contents cannot be accessed by Signal or other third parties because the communications are always end-to-end encrypted. So that raises an interesting Wireshark

What Can Wireshark Really Tell You About an Encrypted Signal Conversation? Read More »

, , , , ,

Where can I get PCAP Packet Captures for Learning and Exploration?

Frequently Asked Questions / By

Views: 7,823I am often asked this question of where to access PCAP or PCAP-NG files so that folks can explore packet captures using Wireshark.  I have always provided these resources in my Wireshark classes at the Online School, but thought I should also just list them here for public consumption. Before you click! One caution:

Where can I get PCAP Packet Captures for Learning and Exploration? Read More »

, , , ,

End-to-End Encryption: A Privacy Victory or a Networking Blind Spot?

The CellStream Blog / By

Views: 840TLS 1.3, QUIC, HTTP/3, encrypted DNS, and Encrypted Client Hello increasingly conceal application and transport information that network operators traditionally used for troubleshooting, security inspection, filtering, performance optimization, and policy enforcement. Here is a little reference chart: This produces two defensible but conflicting positions: For most of the Internet’s history, and certainly for my

End-to-End Encryption: A Privacy Victory or a Networking Blind Spot? Read More »

, , , , , , , ,

Combining Wireshark Ring Buffers with Capture Filters for Performance

Networking and Computing Tips and Tricks / By

Views: 2,304 Check out these great references as well:  Our custom profiles repository for Wireshark  Our Udemy course on Wireshark   Our Udemy course on Wireless Packet capture In our previous post I showed you how to use Wireshark’s Ring Buffer feature. I think we can all agree how great that feature is. In this port

Combining Wireshark Ring Buffers with Capture Filters for Performance Read More »

, , , ,

Wireshark Ring Buffer Capture Feature

Networking and Computing Tips and Tricks / By

Views: 3,540 Check out these great references:  Our custom profiles repository for Wireshark  Our Udemy course on Wireshark   Our Udemy course on Wireless Packet capture Wireshark’s Ring Buffer feature is a capture mechanism feature that automatically rotates packet capture files based on size or time limits, overwriting the oldest files when a defined limit is

Wireshark Ring Buffer Capture Feature Read More »

, ,

What is the Adapter for loopback traffic capture in Wireshark?

Networking and Computing Tips and Tricks / By

Views: 10,215Using a loopback adapter (also called a local loopback interface) for packet capture in Wireshark allows you to capture traffic that stays within your own computer — for example, packets exchanged between local applications via localhost or 127.0.0.1. Normally, this traffic never reaches a physical network interface, so a loopback capture is needed to

What is the Adapter for loopback traffic capture in Wireshark? Read More »

, ,

Ethernet Taps to Capture Network Traffic

Networking and Computing Tips and Tricks / By

Views: 5,162Many technicians and network engineering staff, as well as IT staff, often need to “tap” into the Ethernet to capture and troubleshoot network traffic. A full-duplex tap (also called a network tap) is a hardware device placed inline on an Ethernet link that allows network engineers to capture all traffic traveling in both directions

Ethernet Taps to Capture Network Traffic Read More »

, , , ,

Can ChatGPT 5 analyze PCAP’s?

Networking and Computing Tips and Tricks / By

Views: 7,870I am a ChatGPT subscriber to the basic (not PRO) service. I saw the following post on LinkedIn and was fascinated: Think about the implications. You don’t need to know how to use Wireshark other than to do a capture. You certainly don’t need to know how to troubleshoot packet captures as ChatGPT can

Can ChatGPT 5 analyze PCAP’s? Read More »

, , , ,

Capturing Wi-Fi Beacon Frames with WinFi

Networking and Computing Tips and Tricks / By

Views: 3,927As a frequent reader here will know, my Wi-Fi Analyzer of choice is called WinFi. It has been around many years as is fabulous. In version 2, and the new version 3, you can capture Wi-Fi Beacon Frames and examine them. This post will explain what you can capture and how this is useful.

Capturing Wi-Fi Beacon Frames with WinFi Read More »

, , , ,

Troubleshooting Your Network Using Port Mirroring and Packet Capture

Networking and Computing Tips and Tricks / By

Views: 6,303Scenario Let’s say you have a DHCP server running on a Cisco Switch that is behaving strangely and you want to examine the traffic over a couple of hours while not creating a gigantic unmanageable capture file. A note here: I am doing this on a Cisco switch, but most all vendor switches support

Troubleshooting Your Network Using Port Mirroring and Packet Capture Read More »

, , ,

Anonymizing Capture Files and More with Tracewrangler

Networking and Computing Tips and Tricks / By

Views: 5,294One of the things that we have to do when capturing packets is save the packet captures to a file, so we can study them, or even send them to someone else who can help us to understand what is happening, or to send them the manufacturers as evidence of what went wrong with

Anonymizing Capture Files and More with Tracewrangler Read More »

, , ,

Packet Capture in Windows using pktmon.exe

Networking and Computing Tips and Tricks / By

Views: 10,194Microsoft has added a packet sniffing/packet capture tool in the latest Windows 10 update. We have previously discussed using the ‘netsh’ command to do packet capture in Windows (see my article here). The pktmon tool is new.  What does this mean?  Is it better than netsh?  Does it integrate with Wireshark? Well, it means

Packet Capture in Windows using pktmon.exe Read More »

, , ,

Capturing Wi-Fi WLAN Packets in Wireshark on MacOS

Networking and Computing Tips and Tricks / By

Views: 9,529 Check out these great references as well:   Our Wireless custom profile for Wireshark  Our Udemy course on Wireless Packet capture  Our other Wi-Fi related articles Ok all you Mac users, here is the way you capture Wi-Fi/WLAN frames using your Mac and Wireshark. First, Mac users get a really easy time of putting

Capturing Wi-Fi WLAN Packets in Wireshark on MacOS Read More »

, , , ,

Finding Text Strings in Wireshark Captures

Networking and Computing Tips and Tricks / By

Views: 96,674A common question regarding Wireshark packet analysis is “Can I find a text string in a packet capture?” Check out these great references as well:  Our custom profiles repository for Wireshark  Our Udemy course on Wireshark   Our Udemy course on Wireless Packet capture The answer is that it depends on where the text string

Finding Text Strings in Wireshark Captures Read More »

, ,

A Terminal Version of tshark – we love it!

Networking and Computing Tips and Tricks / By

Views: 4,402 Check out these great references as well:  Our custom profiles repository for Wireshark  Our Udemy course on Wireshark   Our Udemy course on Wireless Packet capture Just introduced this week is a terminal version of tshark that looks like the Wireshark GUI call termshark. Why? Let’s say you run either Virtual Machines or Servers

A Terminal Version of tshark – we love it! Read More »

, ,
Scroll to Top