JJoseph O'Shaughnessy·4d agoDiagnosing Slow TCP TransfersPacket loss or a slow app? How to tell the difference in Wireshark, using dup ACKs, fast retransmissions and zero windows.10 min read·josephoshaughnessy.hashnode.dev1
JJoseph O'Shaughnessy·Oct 31Diagnosing DNS Failures with dig and tcpdumpFive ways DNS breaks, and how dig and a packet capture tell them apart11 min read·josephoshaughnessy.hashnode.dev1
JJoseph O'Shaughnessy·Oct 18Finding an MTU Black HoleWhy big transfers hang when ping works, and three ways to fix it12 min read·josephoshaughnessy.hashnode.dev
JJoseph O'Shaughnessy·Oct 18Diagnosing a Failed TCP HandshakeThree ways a TCP handshake fails, and how to tell them apart in a packet capture12 min read·josephoshaughnessy.hashnode.dev
Mmhk cyber·Oct 3My First Wireshark PCAP: Kongtuke Rebuke! My first hands on Wireshark PCAP analysis of the “Kongtuke Rebuke!” traffic-analysis exercise from Malware-Traffic-Analysis.net, the struggles, investigation process, and what I learned along the way.6 min read·mhk-cyber.hashnode.dev
JJebitok·Sep 22Packed Light: Wireshark x Cryptography - XOR & Base64 - Forensics (TryHackMe)Link to the challenge on TryHackMe: Packed Light 🛎️ Concierge Briefing Tiny packets. Odd hours. Suspiciously regular. Someone's smuggling out the data equivalent of a hotel towel every night, folded10 min read·sharonjebitok.com
RRobin Hayer·Sep 21The tool said it wrote 48 packets. Only 44 were thereExit code zero said success, but the packet count said otherwise.5 min read·robinhayer.hashnode.dev
PPreetimant·Sep 15Understanding Modbus/TCP Through Packet Analysis — HTB Watch TowerA beginner-friendly walkthrough of Modbus fundamentals, packet structure, Wireshark analysis, and TShark extraction from an ICS/SCADA lab.14 min read·preetimant.hashnode.dev
RRobin Hayer·Aug 26Concurrency Without a Parallel Parser: Splitting PCAPs by Sessiontshark needs linear state, so I moved the concurrency upstream — and hit a corrupted-output problem on the way.5 min read·robinhayer.hashnode.dev
YYogeshwar Peela·Aug 10TryHackMe : Overflow The Jackpot writeupComplete TryHackMe Overflow The Jackpot walkthrough covering crypto, web, forensics, detection engineering, malware analysis, and boot2root. coverage.35 min read·exploitnotes.hashnode.dev1
