This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Different display Hercules vs Wireshark

0

I am new with Wireshark. My question is related to simple TCP communication between Hercules utility and other peer (another computer). When send some data from Hercules (TCP client), I receive answer. However data, answered I cannot find at Wireshark display. My display filter is ip address of "non Hercules" end (peer). I can find data send from Hercules, but response data I don't find. Where I go wrong.

asked 14 Oct '14, 01:35

DiGiorgio's gravatar image

DiGiorgio
11112
accept rate: 0%

Can you see the answer when you clear the display filter? What is the display filter expression you use?

(14 Oct '14, 04:07) Jaap ♦

My display filter is ip.addr == 192.168.1.56 (which is "non Hercules" peer. I don't see them without display filter, either. Edit/FindPacket - HexValue -01111f gives nothing, although Hercules displays it.

(14 Oct '14, 04:42) DiGiorgio