Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

This is probably a newb question, so sorry for that.

I want to sniff traffic going through my wireless router. The router is provided by my cable company, so I don't want to flash the firmware or anything, so my questions is: Is there any software or such that I can install on one of the computers on my network, and have it log the HTTP request/response?

Use case: I'm playing a game on my Droid, and I want to see the traffic.

Note: I've already tried setting up a proxy and logging that way. The game seems to be bypassing my Proxy settings. Other web traffic will go through my proxy, but not the game's traffic. I know it's using HTTP, because the game DOES obey the proxy on my friend's iphone (same game). So setting up a proxy isn't a solution that will work.

Any help or guidance is greatly appreciated!

share|improve this question
1  
Try Wireshark. –  Karan Nov 10 '12 at 19:05

2 Answers 2

up vote 2 down vote accepted

With the router you have, unless it allows you to mirror traffic to a port on it, wont let you do this. There are a few ways you could get the traffic:

One, you could setup a hub, not a switch, between the router and the internet and then plug a computer running a packet sniffer like Wireshark into another port on the hub.

Two, you could setup a computer as a gateway between the wireless router and the internet and have all traffic captured using a tool like Wireshark or tcpdump.

Three, setup a new wireless access point that is connected to a hub and have the internet router connected to that hub and a computer connected to that hub running a tool like Wireshark.

Or you could get a router that lets you mirror all traffic to a port on it and plug a computer into that port running a tool like Wireshark.

Sometimes with the right hardware you can capture wireless traffic with Wireshark, if you search the internet there are a few how-tos on how to do this.

You can also look at using something like a AirPcap

share|improve this answer
    
Thanks for the tips. I'll try them out and see if I can get it to work. –  BigSean Nov 11 '12 at 21:34
    
Setting up wireless access point allowed me to sniff traffic using wireshark. Thanks! –  BigSean Nov 21 '13 at 20:05

Another approach is to try using ettercap to sniff your LAN. It has various man-in-the-middle techniques - the most useful on a LAN is the poison ARP mitm approach (assuming your default gateway is 192.168.0.1 - check in your network settings):

ettercap -T -M arp:remote /192.168.0.1/ //

Generally this should redirect all traffic to the machine that's running ettercap - some devices manage to sidestep the approach.

Otherwise you'll need to investigate your router and check if it can support port mirroring or link layer bridge modes. The Thomson/Technicolor/Speedtouch routers do support PPP over Ethernet (PPPoE) bridging and some can also do port mirroring.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.