This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

ASCII Translations

1

Pardon the (probably) stupid question, but I'm completely new to Wireshark. I've just captured some packets and am trying to read them. One of the lines from the capture looks like this:

0030  32 30 2d 32 32 30 32 53  05 f1 32 7d 05 f1 32 0b   2.-22.2. .12'.12.

I thought that the right side was supposed to be the ASCII translation of the raw hex dump on the left. The first byte 32 is indeed the number "2" as shown on the right. However, the second byte, 30 is the digit "0". This is translated to "." on the ASCII side, which is wrong. The next 3 digits are right, but the forth one is wrong again. Is something configured incorrectly?

asked 15 Nov '11, 19:22

prezt's gravatar image

prezt
16●1●1●2
accept rate: 0%

edited 15 Nov '11, 19:26

helloworld's gravatar image

helloworld
3.1k●4●20●41

That's strange. Can you upload this packet capture (sanitized as necessary) to cloudshark and post a link here?

(15 Nov '11, 19:31) helloworld

I just validated tshark and Wireshark using a recent SVN build on OSX 10.7.2:

0030  32 30 2d 32 32 30 32 0a                           20-2202.

What version is your Wireshark and OS?

(15 Nov '11, 19:52) helloworld

One Answer:

0

Could this be a font related problem? What font are you using (Edit -> Preferences -> Font)

answered 16 Nov '11, 03:06

packethunter's gravatar image

packethunter
2.1k●7●15●48
accept rate: 8%