Read the traffic. Explain the system.
How to Detect Encrypted DNS Bypass in Wireshark
Use packet captures, resolver logs and controlled tests to identify DoH, DoT and DoQ bypass—and separate suspicious traffic from confirmed resolution.
By Packet Report Editorial Team · 2026-10-24 · 6 min readLatest
How to Identify iCloud Private Relay Traffic
Use DNS answers, Wireshark conversations and Apple’s egress IP feed to identify iCloud Private Relay traffic without overreading encrypted metadata.
DNSSEC SERVFAIL After the October 2026 Rollover: A Diagnostic Workflow
Diagnose post-rollover DNSSEC SERVFAIL with dig, Wireshark and trust-anchor checks. Verify key 38696 and restore validation without disabling DNSSEC.
How to Measure Retransmissions in a Packet Capture
Use Wireshark and TShark to count TCP retransmissions, calculate a directional share, and check sequence numbers, recovery timing and capture quality.
How to Identify MTU Problems in Wireshark
Use Wireshark filters to find MTU errors, inspect packet sizes and MSS, and test suspected path MTU black holes without mistaking offload artifacts.
How to Identify a TLS Handshake Failure in Wireshark
Find TLS alerts, isolate the failing TCP stream, and distinguish handshake rejection from resets, timeouts, and encrypted TLS 1.3 messages.
How to Find DNS Timeouts in Wireshark
Find unanswered DNS queries, inspect retries and response times, and distinguish a real timeout from DNS errors or an incomplete capture.
More articles
How to Find a Slow Server Response in Wireshark
Use Wireshark response-time filters and packet timestamps to find slow requests, distinguish transport stalls, and understand encrypted-traffic limits.
How to Diagnose TCP Resets in a Packet Capture
A Wireshark and TShark workflow for finding TCP resets, checking sequence numbers, and investigating endpoint or network-device resets.
How to Compare Network Latency in Packet Captures
A Wireshark and TShark workflow for comparing TCP RTT across captures, checking capture quality and separating network delay from application waits.
How to Capture Packets from a Wireless Client
Choose the right capture point, record a Wi-Fi client’s traffic with Wireshark, and use monitor mode when you need raw 802.11 frames.
What HTTPS Hides in a Packet Capture — and What It Leaves Visible
A packet capture can still reveal addresses, timing, size, transport behaviour and sometimes a hostname even when HTTPS protects page contents.