New answers tagged

2

A TCP stream typically starts when a process calls the operating system's TCP/IP APIs to start a TCP connection. It starts with a "3-way handshake" (3 packets) and typically ends with a "4-way close" (4 packets), and there are usually at least 2 individual TCP segments (packets) in between (like a single-packet request and single-packet ...


0

ICMP is allowed by default on the device 10.50.140.179 and 10.50.140.179 is listening for this communication. There must be a program that is listening to port UDP 4501 so that you can get a response from 10.50.140.179.


0

Use airodump -i network interface airodump presents channels number of interested Access point


1

SSDP is used to detect automatically network services. When you send a crafted SSDP request on a multicast address (such as 239.255.255.250), all devices providing this kind of services should respond with an SSDP "Notify" packet. The data of these answer packets are structured like an HTTP header and contains information about the services ...


0

**Solved obscurely I changed my router address to the usual default and this solved the problem. For anyone thats reading and encounters a similar situation set your Default gateway IP to a standard 192/198 value. Im not sure how to limit NMAP's scope to just your LAN and so on but this works as it detects the local address first before trying to find it on ...


0

Assuming you wish to parse the actual XML inside a SOAP-envelope/package, you may do that by using PowerShell - if you instead wish to parse the actual SOAP-data you will need to consume it via a worker in a higher language, I am not aware that this is possible via PowerShell. Regarding parsing a SOAP-message as a XML-structure - effectively ignoring all ...


1

It appears you were sniffing on the virtual bridge interface. This interface will only receive traffic directed there + some other packets as part of the discovery process. Keep in mind that a bridge works mostly like a regular Ethernet switch: Once the switch has learned which MAC addresses are reachable through which ports, traffic for these MAC addresses ...


0

If you are writing your own program that uses mDNS – forget Wireshark and forget Nmap. Treat mDNS like any other network protocol that you'd implement, and make your own mDNS queries and receive responses through a standard UDP multicast socket instead of going through "packet captures" and such. There are two ways to use DNS-SD service discovery ...


Top 50 recent answers are included