This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Would anyway be able to have a look in the pcap of my computer as I am thinking my computer get attacked by a process keep sending out packet from my computer to DoS my network. I get errors in DNS very often and I simply cannot use the internet.

pcap

asked 10 Apr '16, 18:31

Henrylalala's gravatar image

Henrylalala
6113
accept rate: 0%

edited 10 Apr '16, 18:33

To help with this one you'd atleast have to posts the part(s) of the pcap you are concerned with.

(11 Apr '16, 10:29) msmorten

As msmorten points out we could do with some indication of which packets you are concerned about.

Did you choose to capture the layer 4 headers only as none of the packets appear to have any data?

From the PCAP provided it certainly appears like something isn't working properly as there is no data in what appears to be DNS packets (It's UDP to port 53), or any packets for that matter.

(17 Apr '16, 19:05) sludge3000

You have limited the frame size during the capturing phase, so it's impossible to do any (deeper) analysis.

From what I can see in the pcap: Your client (172.23.72.15) is sending a lot more requests to your DNS resolver (192.168.159.250) thaen it receives responses. That could be a sign for DNS problems. As I said: You've limited the frame size during the capturing phase, so any further analysis is not possible.

Regards
Kurt

permanent link

answered 19 Apr '16, 06:50

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×14

question asked: 10 Apr '16, 18:31

question was seen: 1,123 times

last updated: 19 Apr '16, 06:50

p​o​w​e​r​e​d by O​S​Q​A