Hi in the older versions of Wireshark when I want to show and save data as in the Raw type it displays it fine but in the newer version it just seems to displays numbers how can I fix this? thanks asked 27 Oct '16, 07:47 achalkley edited 27 Oct '16, 08:06 |
One Answer:
It sounds like you're talking about the Follow TCP Stream dialog. Those numbers are the raw display of the values in the packets. Older versions were in ASCII format by default. When you switched to Raw, it saved in raw format, but still displayed as ASCII. The new interface switches both the save format and the display format. Switch to Raw for saving, but switch back to ASCII (or hex or EBCDIC, whatever you want to see) for viewing. answered 27 Oct '16, 10:11 Jim Aragon |