CloudShark Blog

Training, webinars, and resources for network analysis

April 9, 2013

Packet Capture Challenge 7 - Deep, Deep Packets

Written By
April 9, 2013

Posted to:
Capture Challenge

Haven’t got one of our snazzy CloudShark P-Caps yet? Well, how good are your dissector skills?

One of the tools we added in CloudShark 1.7 is the protocol hierarchy tool. Similar to that found in Wireshark, the CloudShark protocol hierarchy tool also lets you click on a given protocol and automatically creates a filter for you based on the packets called out in the hierarchy.

Which, you got to admit, is pretty cool.

We’ve been playing around with it and realized that some protocol stacks can be pretty deep. The deepest one we had so far was this RTCP stream here:

Which is about 6 layers deep (not counting the checksum).

So here’s our challenge to you: can you find one deeper? Upload your capture to and send us the link at The first 5 who beat our RTCP packet will win a CloudShark P-Cap, and the admiration of their peers. Don’t fret though, if you don’t get the first 5 we’ll still send you a T-shirt!

You want this.

Oh and one more thing; since you’ll be uploading a single packet, you may need to apply a “decode as” rule to your capture as well - just let us know what rule you applied (since saving the rule is only available for users of the CloudShark Appliance.

Have fun and happy packet surfing!

About Us

CloudShark is made by QA Cafe, a technology company based in Portsmouth, NH. Our passion for packet captures has grown out of our other product CDRouter.

Get in touch via our Contact us page or by following us on your favorite service: