#wireshark — Public Fediverse posts

Видит ли MAX ваш VPN при Split Routing, если VPN не установлен на компьютере?

Я решил проверить, способен ли MAX Desktop обнаружить VPN, если VPN-клиента в Windows вообще нет. В моей сети Split Routing выполняет роутер Keenetic: часть трафика идёт напрямую, а часть — через OpenConnect-туннель на удалённый VPS. Во время эксперимента я фиксировал действия MAX с помощью Process Monitor, TCPView и Wireshark, а трафик на стороне VPN-сервера — через tcpdump. Проверил, какие системные параметры читает MAX, куда подключается и появляются ли признаки целенаправленного поиска VPN-маршрута.

https://habr.com/ru/articles/1080196/

#MAX #MAX_Desktop #VPN #Split_Routing #Keenetic #OpenConnect #Process_Monitor #Wireshark #tcpdump #Windows

I like the "Noted" button when I upgraded my #Wireshark :)

Nouvelle idée d'article pour le blog (dans ma longue série). Vu que j'ai un #Adguard local, que je connecte mon Fairphone sous #Murena #eos à ce réseau local, si on regardait les requêtes qui passent. Idem avec #Wireshark. Et comparaison à faire avec un smartphone Android classique. Ce sera "intéressant" de voir les différences.

In current versions of #Wireshark, if you want to save an external capture utility configuration you have to use a profile. I'm working on an interface bookmark feature which will decouple that and make it easier to save a bunch of extcap configurations.

iX-Workshop: Wireshark Deep Dive – Netzwerkprobleme gezielt lösen

Erweitern Sie Ihre Wireshark-Kenntnisse, indem Sie reale Netzwerkprobleme analysieren und Sicherheitsbedrohungen aufdecken.

https://www.heise.de/news/iX-Workshop-Wireshark-Deep-Dive-Netzwerkprobleme-gezielt-loesen-11415578.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#ITForensik #IT #iXWorkshops #Netzwerke #Wireshark #news

CVE-2026-76880 - DoS in Wireshark RRC dissector. Crash via malformed packet. Affects 4.6.0-4.6.7 & 4.4.0-4.4.18. CVSS 7.5. Update to patched version now. #CVE #Wireshark #infosec

https://www.valtersit.com/cve/CVE-2026-76880/

@b0rk

I love to use #wireshark directly via #SSH with this tiny #bash script:

#!/usr/bin/env sh

# https://www.commandlinefu.com/commands/view/6912/analyze-traffic-remotely-over-ssh-w-wireshark

FILTER='not port 22'

if [ $# -lt 1 ]; then
echo "Syntax: $0 <FQDN> [filter]"
exit 1
fi

TARGET_HOST="${1}"; shift

if [ $# -ge 1 ]; then
FILTER="${FILTER} and $@"
fi

echo "#####################################################"
echo "USING FILTER: ${FILTER}"
echo "#####################################################"

ssh "${TARGET_HOST}" sudo tcpdump -i any -U -s0 -w - "${FILTER}" | wireshark -k -i -

Zahlreiche Crash-Lücken in #Wireshark geschlossen | Security https://www.heise.de/news/Zahlreiche-Crash-Luecken-in-Wireshark-geschlossen-11415516.html #Patchday #DoS

Numerous crash vulnerabilities in Wireshark closed

In the current Wireshark version, the developers have addressed several security vulnerabilities.

https://www.heise.de/en/news/Numerous-crash-vulnerabilities-in-Wireshark-closed-11415759.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IT #Patchday #Security #Sicherheitslücken #Updates #Wireshark #news

「Wireshark 4.6.8」、28件の脆弱性を修正 ～AI支援の脆弱性報告で前回の倍以上に／無料のパケットキャプチャーツール。旧ブランチには「Wireshark 4.4.18」も
https://forest.watch.impress.co.jp/docs/news/2132970.html

#forest_watch_impress #Wireshark #セキュリティ #脆弱性 #Windows #Mac #Linux #インターネット #ネットワーク

Zahlreiche Crash-Lücken in Wireshark geschlossen

In der aktuellen Wireshark-Version haben sich die Entwickler um mehrere Sicherheitslücken gekümmert.

https://www.heise.de/news/Zahlreiche-Crash-Luecken-in-Wireshark-geschlossen-11415516.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IT #Patchday #Security #Sicherheitslücken #Updates #Wireshark #news

Hunt IoT threats by extracting MQTT topic hierarchy and payloads with tshark. Filter mqtt.msgtype for PUBLISH (3) or SUBSCRIBE (8), then parse client ID, topic, and payload for anomalies. Works on Wireshark 3.x/4.x with Python 3. #wireshark #mqtt #iot

https://www.valtersit.com/vault/extract-mqtt-payloads-and-topic-hierarchy-for-iot-threat-hun-183e51/

#Linux Weekly Roundup for August 16th, 2026: Linux 7.2, #Debian turns 33, #LinuxMint 22.3 HWE with Linux 7.0, #GNOME 51 beta, #SparkyLinux 8.4, #Flatpak 1.18.1, #QEMU 11.1, #Shelly 3.0.4, #Wireshark 4.6.8, #RaspberryPi Imager 2.0.11, Bulletproof #KDE Suite, KDE Frameworks 6.29, #NVIDIA promotes GeForce NOW to stable on Linux, #GIMP 3.4's new features, Linux kernel management in Linux Mint 23, and more https://9to5linux.com/9to5linux-weekly-roundup-august-16th-2026

#OpenSource #FOSS #GNU

Finally getting around to trying to learn #Wireshark and understand some of the network stuff a little more.

One of the first things I noticed which seems kind if odd to me is that periodically I see a slew of #ICMP ping requests to my laptop IP from source addresses that are external to my network.

Is this normal? What external IPs should I be expecting to send ping requests to my laptop on my home network?

#Networking #Homelab

(more Linux and FOSS news in previous posts of thread)

Lemonade 11.6 Integrates Muse-Glimmer 30B, Experimental TheNoise ROCm Image Generation:
https://www.phoronix.com/news/Lemonade-SDK-11.6

AMD GAIA 0.23 Delivers Ability To Install/Run AI Agents From The Terminal:
https://www.phoronix.com/news/AMD-GAIA-0.23

FastFlowLM 1.0 Released Now As Part Of The AMD ROCm Umbrella:
https://www.phoronix.com/news/FastFlowLM-1.0

Overshared to an AI? Proton's Tool Will Give You a Reality Check:
https://feed.itsfoss.com/link/24361/17418931/proton-ai-paper-trail

openJiuwen’s Agent Swarm: When AI Agents Finally Work as a Team:
https://feed.itsfoss.com/link/24361/17411448/openjiuwens-agent-swarm
(Oh yeah, just teach AI agents to team up. Surely they can't cause any trouble, right? RIGHT?)

The Coldcard Exploit Explained: Who Lost Bitcoin and Who's at Risk:
https://news.bitcoin.com/featured/the-coldcard-exploit-explained-who-lost-bitcoin-and-whos-at-risk/

Wireshark 4.6.8 Improves Protocol and Capture File Support, Fixes More Bugs:
https://9to5linux.com/wireshark-4-6-8-improves-protocol-and-capture-file-support-fixes-more-bugs

Roundcube Webmail Patches 11 Critical Vulnerabilities in Emergency 1.6.18 and 1.7.3 Updates:
https://www.linuxcompatible.org/story/roundcube-patches-11-critical-vulnerabilities-in-emergency-1618-and-173-update/

Zed v1.15.0 Lands with Self-Hosted AI Predictions, Git Baseline Toggle, and Wayland Drag-and-Drop:
https://www.linuxcompatible.org/story/zed-editor-v1150-adds-selfhosted-ai-predictions-git-diff-baseline-and-wayland-support/

Flutter 3.47 introduces standalone UI packages and Impeller for desktop:
https://alternativeto.net/news/2026/8/flutter-3-47-introduces-standalone-ui-packages-and-impeller-for-desktop/

Podman 6.1 introduces volume renaming, restart command, and robust bugfixes:
https://alternativeto.net/news/2026/8/podman-6-1-introduces-volume-renaming-restart-command-and-robust-bugfixes/

PHP 8.4.25 and 8.5.10 release candidates drop with serious stack-overflow hardening:
https://www.linuxcompatible.org/story/php-8425-and-8510-release-candidates-ship-with-stack-hardening/

PHP 8.6.0 Beta 1 Lands With Partial Function Application, Native Polling API, and a Hard Shift Toward Strict Errors:
https://www.linuxcompatible.org/story/php-860-beta-1-partial-function-application-native-polling-and-stricter-error-handling/

PostgreSQL 19 Beta 3 and Critical Security Patches Released; PG 14 EOL Notice Issued:
https://www.linuxcompatible.org/story/postgresql-19-beta-3-and-critical-security-patches-released-pg-14-eol-notice-issued/

GCC 17 Compiler Adding "-m128bit-atomic" For 128-bit Atomic Memory Operations:
https://www.phoronix.com/news/GCC-Git-m128bit-atomic

(more FOSS news in comments)

#WeeklyNews #FOSSNews #AI #Zed #Flutter #PHP #Podman #PostgreSQL #Dev #AMDGAIA #FastFlowLM #Coldcard #Bitcoin #Wireshark #GCC #ArtificialIntelligence #LLM #AgenticAI #Programming #Development #Coding #IDE #DBMS #SQL #FosseryTech

Capture Windows network traffic: Edge Visibility client agent for Allegro

Allegro Packets supplements its central multimeter analysis appliances with local agents for data capture directly on the Windows client or server.

https://www.heise.de/en/news/Capture-Windows-network-traffic-Edge-Visibility-client-agent-for-Allegro-11414730.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IT #Netzwerke #Wireshark #news

Windows-Netzverkehr mitschneiden: Client-Agent Edge Visibility für Allegro

Allegro Packets ergänzt seine zentralen Multimeter-Analyse-Appliances um lokale Agenten für den Datenmitschnitt direkt auf dem Windows-Client oder -Server.

https://www.heise.de/news/Windows-Netzverkehr-mitschneiden-Client-Agent-Edge-Visibility-fuer-Allegro-11414491.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#IT #Netzwerke #Wireshark #news

Один DNS‑запрос породил 329 запросов. Я полез разбираться, куда они все ушли

Один DNS‑запрос. Пустой кеш. И 329 исходящих запросов вслед за ним. Сначала я решил, что где‑то неправильно понял цифры. Потом полез разбираться и выяснил, что recursive resolver внутри делает намного больше работы, чем видно по обычному dig . Разбираю, откуда берутся эти сотни запросов, при чём здесь CNAME, glue, DNSSEC, IPv6 PTR и почему разные версии BIND на одном и том же запросе могут отличаться почти в три раза.

https://habr.com/ru/articles/1070280/

#DNS #BIND #recursive_resolver #DNSSEC #IPv6 #PTR #cold_cache #CNAME #Wireshark #IETF

Gerald Combs released #Wireshark version 4.6.8. https://www.wireshark.org/

#Wireshark 4.6.8 Improves Protocol and Capture File Support, Fixes More Bugs https://9to5linux.com/wireshark-4-6-8-improves-protocol-and-capture-file-support-fixes-more-bugs

#OpenSource #FreeSoftware #Linux

#Wireshark 4.6.8 has been released. Cheers! These releases are brought to you by the Wireshark Foundation. If you or your employer can donate, it would help us out immensely.

https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html

https://wiresharkfoundation.org/donate/

Stop ARP spoofing with tshark. Detect unsolicited ARP replies via `arp.opcode == 2` and filter duplicate IPs by source MAC. Run: `tshark -i eth0 -Y "arp" -T fields -e eth.src -e arp.src.proto_ipv4`. Full breakdown inside. #wireshark #snippet #arp #spoofing #ValtersIT

https://www.valtersit.com/vault/monitor-arp-spoofing-with-ethernet-frame-filters-af0db5/

🐟🎶 Wow, "Babyshark" is here to show that #Wireshark needed a #cutesy terminal UI because, clearly, network analysis wasn’t fun enough without #emojis and a dance routine! 🤦‍♂️ GitHub's new baby toy promises to streamline your PCAP experience, ensuring every packet is *adorable* while you ponder if we really needed yet another reason to procrastinate. 📉✨
https://github.com/vignesh07/babyshark #Babyshark #terminalUI #networkanalysis #procrastination #HackerNews #ngated

Flipper Zero WiFi hacking in a few minutes with Talking Sasquach 😀
Includes Marauder, Wireshark and Hashcat!

YouTube video: https://youtu.be/F5iiwounbzY

#wifi #flipperzero #hashcat #wireshark #wpa2 #cyber #flipper #hacking #Cybersecurity #cyber #hacker #hack #infosec