This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi

I found this in Wireshark around the time of a TP Link WR702N nano router disconnect and have reported it to TP Link. But could you tell me what it means please?

Its followed by error codes 108, 60 ,51 61 and 47. Thanks Tim [email protected]

asked 04 Oct '16, 03:17

Tim777's gravatar image

Tim777
6112
accept rate: 0%

Although it's possible someone who knows the X11 protocol might be reading this, you'll probably be better off asking the question on an X11 support forum.

There's also the X11 protocol spec if that helps.

(04 Oct '16, 03:38) grahamb ♦

Perhaps you're seeing TCP traffic to or from a port in the range 6000-6063 that's not X11 traffic but that happens to be dissected as X11 traffic because Wireshark's X11 dissector registers for TCP ports in that range (because that's a typical use of those ports).

My guess is that your router doesn't use X11, so, if that traffic is related to the router, it's traffic for some other protocol. We'd have to see the raw binary data to try to guess what it might be.

permanent link

answered 04 Oct '16, 15:55

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×17

question asked: 04 Oct '16, 03:17

question was seen: 2,539 times

last updated: 04 Oct '16, 15:55

p​o​w​e​r​e​d by O​S​Q​A