This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is this hacking packets ?

0

Do this packets are hacking packets ?

I've some problem on my LAN so i decieded to install wireshark to be exactly sure of what happens. My IP is the 192.168.1.55 and i have some suspicion on the 192.168.1.51.

Is anyone able to interpret this packets to help me ?

Thanks.

Mega link .pcapng

asked 27 Mar '17, 15:57

W4RdZ's gravatar image

W4RdZ
6113
accept rate: 0%


One Answer:

1

I doubt that those are "hacking packets" - they're pretty normal in a network: some session termination (reset packets) for connections that started way before you started recording, and some SMB stuff (Windows file share etc.)

answered 27 Mar '17, 16:01

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 27 Mar '17, 16:01

ok now i'm sure he was hacking me by p2pover, is any solution to block that software ? I mean is there a program to block arp attacks

(27 Mar '17, 17:18) W4RdZ

What brings you to the conclusion that p2pover is being used to hack you?

(28 Mar '17, 02:02) grahamb ♦

my bro gaves me a screen of without the menu bar i just used google image to found what software it was but now i've got a question, how to protect from this : ARP attack .pcapng

Sry but i'm a newb in network :(

(28 Mar '17, 05:54) W4RdZ