This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hey communety,

I have some problems with my internet connection and I think somebody is using an "ip stresser" to disconnect me from the internet. I captured using wireshark some package and ask somebody to look at it.

The files (3) are anonymised using tracewrangler and uplouded to dropbox. https://www.dropbox.com/sh/cs3wlpwqp5tlftd/AACh9Lrcbe_BntWkDXbZ8srja?dl=0

thanks in advanced You are the best :)

Gr, JP

asked 21 Feb '15, 13:34

jplwolters's gravatar image

jplwolters
6112
accept rate: 0%


Apparently you captured on your local network. You won't be able to see and "ip stresser" (what is that?) traffic if a bad guy is really hammering your link, because your firewall/router will drop it, so you won't see that traffic on the local network.

There are no (obvious) signs for any kind of DoS attack. There are a some TCP RESETS, but all from your internal clients and by far less than TCP SYN. The only strange thing is that you are using a lot of high ports to connect to servers on the internet. That could be gaming traffic. Due to the use of an anonymizer it's not possible to analyze that any further.

Therefore, without more information, it's impossible to give any meaningful answer.

So, why do you believe you are being disconnected from the internet?

Regards
Kurt

permanent link

answered 23 Feb '15, 09:20

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×36
×30
×22
×14

question asked: 21 Feb '15, 13:34

question was seen: 1,734 times

last updated: 23 Feb '15, 09:20

p​o​w​e​r​e​d by O​S​Q​A