Skip to content

How to capture packets with Wireshark

Yoichiro Tanaka edited this page Oct 12, 2015 · 7 revisions

If you face some problem, especially, if you can access to your file server from your client machine (mainly, Windows) normally, but you cannot access to the file server with File System for Windows on your Chromebook, the File System for Windows absolutely has a problem. And, other users also may have the same problem which you faced. You can contribute to help such users.

First, you can collect the debug output log from a console tab on DevTools by How to Capture the Console Log of DevTools. I can understand each response detail from the log, but I cannot know why the target server returned the error code from the log. When some users posted an issue to Github, I replied that "Please give me a server log". Then, I received the server log, but unfortunately, I could not find the reason of the error code.

Most users said that "I can access to the server from other machines". To improve the File System for Windows app, please send packets communicated between the client and the server to me. That is, the packets represent a correct way. When I get them, I can find the difference from my implementation. Then, you and other users would be able to use a new File System for Windows for the target server.

To capture packets, you can use a tool named "Wireshark".

  1. Downloading and Installing ==========================

See the Wireshark Download page: https://www.wireshark.org/download.html

  1. Launching WireShark ===================

Run the installed Wireshark with each way for your operating system:

wireshark1.png

  1. Capturing packets =================

(1) Enter a filtering expression into the "Filter:" text field:

"tcp.port == 445 && ip.addr == 192.168.0.170" (Specify your server's IP Address)

wireshark3.png

Don't forget clicking "Apply" button...

(2) Select menu "Capture"->"Interfaces...":

wireshark4.png

(3) Check one interface and click "Start" button:

wireshark5.png

Capturing packets started.

(4) Access to the target server's shared foler/directory with your client OS:

wireshark6.png

Basically, it is enough only to connect to the server and open the root directory. If Wireshark worked, you should see the captured packets list as like below:

wireshark7.png

(5) Disconnect the connection from the target server:

wireshark8.png

(6) Stop the capture by clicking "Stop" button:

wireshark9.png

(7) Select menu "File"->"Save As...":

wireshark10.png

Save the captured packets to a file you specify.

  1. Sumitting the file =============
  • As attached file to Github issue.
  • As Email. (yoichiro[at]eisbahn.jp)
Clone this wiki locally