This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

why do i keep seeing this?

0

i keep seeing this character in my cmd line captures. why and how do i get rif of it? thanks!

â+'

as in the following: 192.168.0.16 TCP 60 443 â+' 20413 [ACK] Seq=1 Ack=1702 Win=513 192.168.0.16 TCP 62 9571 â+' 20450 [PSH, ACK] Seq=729 Ack=37 Win

etc

asked 02 Feb '16, 19:35

McKittrick's gravatar image

McKittrick
11334
accept rate: 0%

At what operating system it happens?

(03 Feb '16, 03:02) sindy

One Answer:

0

why

Because Wireshark and TShark use the Unicode RIGHT ARROW character, rather than "->", between the source and destination port number in the "Info" column for TCP (and UDP and DCCP) packets, and because whatever is showing that output (terminal emulator, text editor, etc.) apparently isn't properly handling the UTF-8 encoding of that character. If, for example, the terminal emulator or text editor is expecting ISO 8859/1 ("ISO Latin 1") text, it's not going to properly display the text output from Wireshark.

how do i get rif of it?

Either modify Wireshark and TShark not to use that character, or somehow arrange that the software displaying Wireshark's/TShark's output properly handle the UTF-8 encoding of that character.

answered 03 Feb '16, 01:50

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Basically, it helps to try different fonts until you find one that works, e.g. "Consolas" if you're on Windows.

(03 Feb '16, 03:46) Jasper ♦♦