2
votes
1answer
344 views

Change TCP sequence numbers for packet replay?

First off, I'm using wireshark for capture and colasoft for replay. I'm attempting to replay a group of captured packets back, looped to be done several times over (the purpose of this is just to send ...
0
votes
1answer
496 views

Capture TCP communication on a specific port using wireshark

Hi i have build a simple TCP server which listens on port 9999 and has an IP address 202.168.66.1 i have a TCP client which has the same ip address and connects to the server on the said port. Now ...
1
vote
1answer
291 views

IP checksum offload

I recently updated to Windows 8 and get alot of invalid packet transfers. It says "Ip checksum offload?" (Wireshark) and most of my packets get lost. The checksum is 0x00. I also updated my NIC ...
1
vote
1answer
390 views

Replace sensitive IP addresses in Wireshark with XXX.XXX.XXX.XXX

What would be an easy way to replace a sensitive IP address in a Wireshark packet capture with XXX.XXX.XXX.XXX? When I export the pcap in txt or csv I can no longer import it into Wireshark.
2
votes
1answer
11k views

TCP segment of a reassembled PDU

In wireshark sometimes I see this: 478195 5738.896809 192.168.1.79 61.213.44.124 TCP [TCP segment of a reassembled PDU] What is a PDU? Was it reassembled? What does this mean?
2
votes
2answers
5k views

What does this UDP Packet mean?

I'm total newbie at tcp/ip and I was experimenting with Wireshark. What this mean: 1824 578.194204 xxx.xxx.xxx.xxx yyy.yyy.yyy.yyy UDP Source port: 17500 Destination port: 17500 In data I ...
1
vote
2answers
350 views

Is it possible to know which process opened a connection in Windows?

With netstat -a I can see all connections from my machine to the MySQL Server. There is any way too see which process or executable is responsible for each connection? The only solution I found so ...
0
votes
1answer
89 views

How would I do this in wireshark?

I have four packets captured in wireshark. ARP request and reply packets and ICMP packets. What field and values are used to identify the different packets carried by an ethernet frame?