Layer 1 – gets them all the time

 I was doing some work on-site when the client asks me if I can help with his IP cameras.

The vendor helped over the phone and they determined that 2 cameras probably need to be replaced. The client explained that he is not that technical and wanted someone else to take a look before he goes through all the trouble of taking them down and sending them back.

I started with a quick look around and determined that the camera is POE and the cable runs to a patch panel, then to the DVR, which is also providing the POE.

How to Use TShark's Autostop Duration Parameter: A Quick Wireshark CLI Tutorial

If you work with network traffic analysis, this short tutorial on TShark's autostop duration option is worth a watch. TShark, the command-line counterpart to Wireshark, gives network admins and security analysts a powerful way to capture packets without needing the full graphical interface — ideal for headless servers and remote environments. This video walks through the `-a duration` flag, which tells TShark to automatically stop a packet capture once a specified number of seconds has elapsed, saving you from having to manually interrupt long-running captures.

The autostop duration parameter is one of several capture-control options available in TShark, alongside conditions like file size and file count limits. By pairing `-a duration:<seconds>` with the `-w` flag, you can launch a timed capture that writes straight to a `.pcapng` file for later review in the full Wireshark GUI.

Wireshark Name Resolution: Make IP Addresses Easier to Understand (Chris Greer)

If you've ever opened a large Wireshark capture and found yourself staring at thousands of IP addresses, you already know how difficult packet analysis can become. Trying to remember which address belongs to a server, workstation, router or application can quickly turn a simple troubleshooting job into a spreadsheet exercise. That's where Wireshark Name Resolution can make a big difference. Instead of displaying only numerical addresses, Wireshark can translate addresses into hostnames, making a packet capture much easier to read and understand. It doesn't change the traffic in the capture—it simply makes the information already being displayed more useful to the person analyzing it.

How to Calculate Packet Slicing Offsets for Wireshark Packet Captures

There are many scenarios with packet slicing is helpful and possible necessary.

David K, one of my YouTube subscribers, asked a great question, “… How do i configure packet slicing? …”. What a great question since I assume the reader knows how to do this.

In this video I cover how to figure out the packet slicing value for a HTTP GET command and the destination MAC address. From these two examples, the reader should be able to calculate any other packet slice value.

The Next Normal (Paul Smith)

 People love lists. With little effort, you can find the 10 best movies, TV shows, books, albums, songs, plays or cheeseburgers. The 10 best places to visit, live, retire, or attend college are only a few keystrokes away. And of course no list of lists would be complete without mentioning David Letterman’s Top 10 Lists , which can come in handy if you really care about the Easter Bunny’s top 10 pet peeves.