First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Wireshark - exports what it recognises as a jpeg but the jpeg doesn't open

I have a JPEG GET request in my PCAP as below but when I export it, it's not a valid JPEG file

Any ideas?

image description

MrJ's avatar
1
MrJ
asked 2021-03-14 14:27:55 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Change the format to Hex Dump and look for a matching file signature

Chuckc's avatar Chuckc (2021-03-14 14:53:49 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

The screenshot is hard to read. But my gut feeling is that this i actually not a JPEG image based on the first characters in the response.

hugo.vanderkooij's avatar
76
hugo.vanderkooij
answered 2021-03-15 10:11:04 +0000
edit flag offensive 0 remove flag delete link
more

Comments

I had the same idea... if you look at the hex data, does the image start with FF D8 FF? See: https://www.filesignatures.net/index....

SYN-bit's avatar SYN-bit (2021-03-15 10:56:06 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer