--- title: "#wireshark articles | Hashnode" description: "Explore 134 articles tagged #wireshark on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/wireshark" --- Tag # #wireshark 134 posts · 13 followers [Joseph O'Shaughnessy](https://hashnode.com/@josephoshaughnessy) · [4d ago](https://hashnode.com/posts/diagnosing-slow-tcp-transfers/6aef9eb239a473d6c9cf169f) ### [Diagnosing Slow TCP Transfers](https://josephoshaughnessy.hashnode.dev/diagnosing-slow-tcp-transfers?utm_source=hashnode&utm_medium=feed) Packet loss or a slow app? How to tell the difference in Wireshark, using dup ACKs, fast retransmissions and zero windows. 10 min read · [josephoshaughnessy.hashnode.dev](https://josephoshaughnessy.hashnode.dev/diagnosing-slow-tcp-transfers?utm_source=hashnode&utm_medium=feed) [Joseph O'Shaughnessy](https://hashnode.com/@josephoshaughnessy) · [Oct 31](https://hashnode.com/posts/dns-failures-dig-tcpdump/6ae53900ae02375f2968935f) ### [Diagnosing DNS Failures with dig and tcpdump](https://josephoshaughnessy.hashnode.dev/dns-failures-dig-tcpdump?utm_source=hashnode&utm_medium=feed) Five ways DNS breaks, and how dig and a packet capture tell them apart 11 min read · [josephoshaughnessy.hashnode.dev](https://josephoshaughnessy.hashnode.dev/dns-failures-dig-tcpdump?utm_source=hashnode&utm_medium=feed) [Joseph O'Shaughnessy](https://hashnode.com/@josephoshaughnessy) · [Oct 18](https://hashnode.com/posts/mtu-black-hole/6ad5323dd1a4c0ef2ace34a9) ### [Finding an MTU Black Hole](https://josephoshaughnessy.hashnode.dev/mtu-black-hole?utm_source=hashnode&utm_medium=feed) Why big transfers hang when ping works, and three ways to fix it 12 min read · [josephoshaughnessy.hashnode.dev](https://josephoshaughnessy.hashnode.dev/mtu-black-hole?utm_source=hashnode&utm_medium=feed) [Joseph O'Shaughnessy](https://hashnode.com/@josephoshaughnessy) · [Oct 18](https://hashnode.com/posts/tcp-handshake-wireshark/6ad50995b1413071e4d7e3c3) ### [Diagnosing a Failed TCP Handshake](https://josephoshaughnessy.hashnode.dev/tcp-handshake-wireshark?utm_source=hashnode&utm_medium=feed) Three ways a TCP handshake fails, and how to tell them apart in a packet capture 12 min read · [josephoshaughnessy.hashnode.dev](https://josephoshaughnessy.hashnode.dev/tcp-handshake-wireshark?utm_source=hashnode&utm_medium=feed) [mhk cyber](https://hashnode.com/@mhk-cyber) · [Oct 3](https://hashnode.com/posts/my-first-wireshark-pcap-kongtuke-rebuke/6ac09a31c70626db4ef4e98e) ### [My First Wireshark PCAP: Kongtuke Rebuke!](https://mhk-cyber.hashnode.dev/my-first-wireshark-pcap-kongtuke-rebuke?utm_source=hashnode&utm_medium=feed) My first hands on Wireshark PCAP analysis of the “Kongtuke Rebuke!” traffic-analysis exercise from Malware-Traffic-Analysis.net, the struggles, investigation process, and what I learned along the way. 6 min read · [mhk-cyber.hashnode.dev](https://mhk-cyber.hashnode.dev/my-first-wireshark-pcap-kongtuke-rebuke?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 22](https://hashnode.com/posts/packed-light-wireshark-x-cryptography-xor-base64-forensics-tryhackme/6ab2d4f64aa14470ae4d0ebf) ### [Packed Light: Wireshark x Cryptography - XOR & Base64 - Forensics (TryHackMe)](https://www.sharonjebitok.com/packed-light-wireshark-x-cryptography-xor-base64-forensics-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the challenge on TryHackMe: Packed Light 🛎️ Concierge Briefing Tiny packets. Odd hours. Suspiciously regular. Someone's smuggling out the data equivalent of a hotel towel every night, folded 10 min read · [sharonjebitok.com](https://www.sharonjebitok.com/packed-light-wireshark-x-cryptography-xor-base64-forensics-tryhackme?utm_source=hashnode&utm_medium=feed) [Robin Hayer](https://hashnode.com/@robinhayer) · [Sep 21](https://hashnode.com/posts/pcapsplitter-file-collision-tcp-session-reuse/6ab07e6b76ee31e90b4bb4c5) ### [The tool said it wrote 48 packets. Only 44 were there](https://robinhayer.hashnode.dev/pcapsplitter-file-collision-tcp-session-reuse?utm_source=hashnode&utm_medium=feed) Exit code zero said success, but the packet count said otherwise. 5 min read · [robinhayer.hashnode.dev](https://robinhayer.hashnode.dev/pcapsplitter-file-collision-tcp-session-reuse?utm_source=hashnode&utm_medium=feed) [Preetimant](https://hashnode.com/@preetimant) · [Sep 15](https://hashnode.com/posts/understanding-modbus-tcp-through-packet-analysis-htb-watch-tower/6aa919bd4fb4a298dca4f6c1) ### [Understanding Modbus/TCP Through Packet Analysis — HTB Watch Tower](https://preetimant.hashnode.dev/understanding-modbus-tcp-through-packet-analysis-htb-watch-tower?utm_source=hashnode&utm_medium=feed) A beginner-friendly walkthrough of Modbus fundamentals, packet structure, Wireshark analysis, and TShark extraction from an ICS/SCADA lab. 14 min read · [preetimant.hashnode.dev](https://preetimant.hashnode.dev/understanding-modbus-tcp-through-packet-analysis-htb-watch-tower?utm_source=hashnode&utm_medium=feed) [Robin Hayer](https://hashnode.com/@robinhayer) · [Aug 26](https://hashnode.com/posts/concurrency-without-a-parallel-parser/6a8eba2c964c1d5aabe05ce9) ### [Concurrency Without a Parallel Parser: Splitting PCAPs by Session](https://robinhayer.hashnode.dev/concurrency-without-a-parallel-parser?utm_source=hashnode&utm_medium=feed) tshark needs linear state, so I moved the concurrency upstream — and hit a corrupted-output problem on the way. 5 min read · [robinhayer.hashnode.dev](https://robinhayer.hashnode.dev/concurrency-without-a-parallel-parser?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 10](https://hashnode.com/posts/tryhackme-overflow-the-jackpot-writeup/6a794fea8a2cc2d5fef1993b) ### [TryHackMe : Overflow The Jackpot writeup](https://exploitnotes.hashnode.dev/tryhackme-overflow-the-jackpot-writeup?utm_source=hashnode&utm_medium=feed) Complete TryHackMe Overflow The Jackpot walkthrough covering crypto, web, forensics, detection engineering, malware analysis, and boot2root. coverage. 35 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-overflow-the-jackpot-writeup?utm_source=hashnode&utm_medium=feed)