Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is probably a newb question, so sorry for that.

I want to sniff traffic going through my wireless router. The router is provided by my cable company, so I don't want to flash the firmware or anything, so my questions is: Is there any software or such that I can install on one of the computers on my network, and have it log the HTTP request/response?

Use case: I'm playing a game on my Droid, and I want to see the traffic.

Note: I've already tried setting up a proxy and logging that way. The game seems to be bypassing my Proxy settings. Other web traffic will go through my proxy, but not the game's traffic. I know it's using HTTP, because the game DOES obey the proxy on my friend's iphone (same game). So setting up a proxy isn't a solution that will work.

Any help or guidance is greatly appreciated!

share|improve this question
1  
Try Wireshark. – Karan Nov 10 '12 at 19:05
up vote 4 down vote accepted

With the router you have, unless it allows you to mirror traffic to a port on it, wont let you do this. There are a few ways you could get the traffic:

One, you could setup a hub, not a switch, between the router and the internet and then plug a computer running a packet sniffer like Wireshark into another port on the hub.

Two, you could setup a computer as a gateway between the wireless router and the internet and have all traffic captured using a tool like Wireshark or tcpdump.

Three, setup a new wireless access point that is connected to a hub and have the internet router connected to that hub and a computer connected to that hub running a tool like Wireshark.

Or you could get a router that lets you mirror all traffic to a port on it and plug a computer into that port running a tool like Wireshark.

Sometimes with the right hardware you can capture wireless traffic with Wireshark, if you search the internet there are a few how-tos on how to do this.

You can also look at using something like a AirPcap

share|improve this answer
    
Thanks for the tips. I'll try them out and see if I can get it to work. – Sean Adkinson Nov 11 '12 at 21:34
    
Setting up wireless access point allowed me to sniff traffic using wireshark. Thanks! – Sean Adkinson Nov 21 '13 at 20:05

Another approach is to try using ettercap to sniff your LAN. It has various man-in-the-middle techniques - the most useful on a LAN is the poison ARP Man-In-The-Middle (MITM) approach (assuming your default gateway is 192.168.0.1 - check in your network settings):

ettercap -T -M arp:remote /192.168.0.1/ //

Generally this should redirect all traffic to the machine that's running ettercap - some devices may manage to sidestep the approach.

Otherwise you'll need to investigate your router and check if it can support port mirroring or link layer bridge modes. The Thomson/Technicolor/Speedtouch routers do support PPP over Ethernet (PPPoE) bridging and some can also do port mirroring.

share|improve this answer
    
This does not work. Ettercap wants another group to be mentioned as target – Romaan Feb 17 at 20:27

cheapest fix - use your cable router as a modem, then buy a router that supports mirroring to broadcast your wifi. (*shut off wifi on the cable modem and hard wire the new router to it for internet - that way all wireless traffic gets captured.) You can then pick any connected device as the target of your mirror - pick one with decent storage and remember it can only capture when connected to your new router.

Even older routers will support mirroring, and can be had on Ebay for under $20 - but buy a good one, you will want fast wifi at home!

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.