Tagged Questions

5
votes
1answer
250 views

How do you analyze an unknown network protocol?

Of course Wireshark can be used to sniff traffic - you can inspect each packet or chain of packets. But how would you do it smarter? Which tools do you use to identify behaviors or to automate the ...
4
votes
2answers
454 views

How to see whether the pcap contains RTP traffic?

I am analyzing the traffic of a VOIP application. I started up wireshark, and made sure no other application was using internet, and then had a a voice call on the application. Wireshark captured some ...
7
votes
4answers
1k views

extract from pcap all protocols found

I have some pcap files, and i would like just to get a list of protocols that are present on that pcap file. I would like it in a batch mode, not using wireshark I think tshark is able to do it, but ...