Grab the TCP Analysis Poster - downloaded over 10,000 times so far!

Selective ACKs reduce the number of retransmissions on the network - enabling a receiver to indicate the missing Sequence Numbers while...

If you've been capturing traffic for a while, you've likely encountered some Selective Acknowledgment blocks. Selective Acknowledgment...

Wireshark version 4.4.0 just dropped last week and it has a cool new feature in it: auto-switch profiles! This may change how I use...

Last weekend, I settled in to watch the final episodes of Super Pumped: The Battle For Uber on Netflix. After a week of intense work on...

Buttons, buttons, buttons... one of the coolest features added to Wireshark. In the last blog, I showed you how to create a button. Now...

Have you created buttons for Wireshark yet? Buttons enable you to apply your favorite display filters to your trace files quickly. When...

Should you be concerned if you see this Expert warning in your trace file? Maybe. There are several possible reasons these may be in your...

Did you get a chance to try out last week's Wireshark Challenge based on the chappell-WChallenge012024.pcapng? Too easy? If you didn't -...

Test your Wireshark skills. Answers will be posted next week. Grab chappell-WChallenge012024.pcapng and take a few moments to answer the...

The ability to look for a field or a field value at a specific layer is one of the many cool display filter enhancements recently added...

The first column I add to every one of my custom Wireshark profiles is a "stream" column - a single column that indicates the index...

In 1974, the world was focused on the Rumble in the Jungle and Richard Nixon's resignation in disgrace. In that same year (in May), Vint...

If you understand TCP/IP and how your network communications work, you understand where to look when things go wrong. You also understand...

The "Bad TCP" designation is seen in the coloring rules, while the "TCP Errors" designation is seen in the IO Graph. Are they the same?...

This is a quick tip that you'll love. By default, Wireshark's IO Graph depicts the packets per second rate of all traffic and "Bad TCP"...

During a recent class, I received a question related to ACK scans. "What Sequence Number would you see on the response to an ACK scan?"...

The discovery of malicious code in the XZ utils tarball has shaken up a lot of folks. XZ utils have been removed from Github and the...

You've captured some DNS traffic and are perusing through the packets. You see the regular Resource Record (RR) Type A requests for IPv4...

Are you looking to test Wireshark with a variety of packet types? Do you need to show someone the packet structure a specific protocol...