Questions tagged [wireshark]

A free and open-source network and system packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education.

Filter by
Sorted by
Tagged with
1
vote
0answers
62 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible. To do so I need to sniff the packets that the ...
0
votes
0answers
72 views

Decipher hexadecimal GPS coordinates from UDP message

I'm trying to get the GPS lat/long data from a UDP message. It's captured on a radio dispatch console on a P25 radio system, if that helps. I captured this UDP message when I sent a simulated ...
1
vote
0answers
124 views

Extracting Firmware file from Wireshark Dump

I updated a device over a firmware update software and sniffed the whole traffic with wireshark. There is a TCP Stream with ~30MB which I exported as raw data. The resulting file is Zip archived data ...
2
votes
0answers
76 views

Joysmade USB/WiFi microscope

Short intro: I am building an electronics workbench, and I needed a microscope. This Joysmade USB/WiFi microscope was $45, and it would work with exception to the below issues. My "dumb" TV was set ...
5
votes
0answers
630 views

Identifying a USB device for a forensics CTF challenge (with no GET DESCRIPTOR)

I'm currently enjoying a forensics CTF challenge. We were provided a PCAPNG file. When opened in Wireshark, the file contains a sequence of URB_INTERRUPT packets from two devices - but no ...
1
vote
2answers
263 views

How to reverse engineer mobile app image?

Scenario On my phone I have an app. When I login into the app and goto my profile there is an profile picture of me. I want to that picture because I need it. Simple way is just goto an local shop an ...
1
vote
0answers
133 views

Wireshark - Bluetooth LE decoding a HCI Log

I have a bluetooth LE home automation style device, that connects to a mobile app. There are 2 values which are updated roughly every second. I'm trying to extract these numbers from the payload. I've ...
1
vote
1answer
239 views

What checksum algorithm is this network protocol using?

I've been working my way through an undocumented TCP-based protocol by monitoring traffic with tcpdump, Wireshark, and some Python packages (scapy, numpy) with good luck so far, but I've hit a wall ...
1
vote
2answers
514 views

Find the right layer header for a corrupt pcap

So the problem is that i have a corrupt pcap file. You can find a the pcap file [here][1]. First i did the file command on it : the.pcap: tcpdump capture file (little-endian) - version 2.4, capture ...
1
vote
1answer
171 views

Raw numeric data interpretation in Wireshark

In WinHex, I can use the Data Interpreter tool to see the numeric interpretation of data starting from the currently selected byte. This considerably simplifies the initial analysis of the data ...
1
vote
5answers
2k views

Using Stunnel to packet capture HTTPS connection

I want to reverse engineer an application using HTTPS to communicate. I need a tool that performs a man in the middle attack and send it's own SSL certificate to the application, so I can decrypt the ...
13
votes
3answers
8k views

Reversing network protocol

I have a DVR that sends video over Ethernet using its own propriety TCP protocol. I want to write a VLC module to view the video, rather than the supplied DxClient.exe. I have captured traffic in ...
5
votes
2answers
4k views

analysing IP camera's UDP packages

I have an industrial IP camera and I want to read its images with a micro-controller, but the camera is only operable from a computer running its drivers/firmware. I used WireShark to access the UDP ...
19
votes
3answers
34k views

Sniffing TCP traffic for specific process using Wireshark

Is it possible to sniff TCP traffic for a specific process using Wireshark, even through a plugin to filter TCP traffic based on process ID? I'm working on Windows 7, but I would like to hear about ...