The pcap tag has no wiki summary.
0
votes
0answers
36 views
Follow a .pcap file in wireshark like tail -f
I have a .pcap file on my android device, that I can access from my PC with wireshark via smb and wondering if it possible to get a 'Live view' of that file in wireshark.
Is there any solution?
0
votes
1answer
75 views
TCPReplay 3.4.4: Unable to find libpcap in /usr
I'm having a problem installing TCPReplay 3.4.4 for Ubuntu 12.04 LTS.
I'm getting this error when I run configure
checking for libpcap... configure: error: Unable to find libpcap in /usr
I have ...
0
votes
0answers
30 views
How to differentiate between three different flavours of pcap files?
There appears to be 3 different file formats associated with the ".pcap" extension -- libpcap /w microsecond timestamps, libpcap /w nanosecond timestamps, and pcapng.
Is there an easy way to ...
0
votes
0answers
30 views
Ignoring a specific domain with ntop or other pcap based tools
Currently, I'm filtering Google's 1e100.net domain from ntop with the filter:
not (src net (74.125/16 or 173.194/16) or dst net (74.125/16 or
173.194/16))
But I think something's wrong, because too ...
0
votes
2answers
236 views
Trouble with mergecap [ concatenation of pcap files ] - undesired info in output file
I hope somebody will be able to help me...
The problem is with merging multiple .pcap files. Recently - like a week ago I've used a mergecap to merge mutiple pcap files into one. Everything worked ...
0
votes
0answers
109 views
use squid to log everything in pcap file
Is it possible to log the whole traffic over my squid proxy into a pcap file? I also have a SSLBump enabled to intercept https traffic, but i need the content of the packages.
i saw there is this ...
1
vote
2answers
8k views
What's all this deploy.akamaitechnologies.com traffic?
I happened to do a tcpdump while leaving my Mac idle, and when I came back after a mere half-hour there were something like 5000 packets involving deploy.akamaitechnologies.com, in which my computer ...
1
vote
1answer
156 views
How to enter pcap filter in Wireshark 1.8?
Previously in capture options window there was a very handy input field for pcap filter expression. But in 1.8.* this window looks different:
So, how to set pcap filter expression before starting ...
0
votes
1answer
558 views
How to extract mpeg-1 stream from pcap in wireshark
I have a pcap network dump that has an MPEG-1 stream inside and I would like to play the mpeg stream. So far I've tried playing through the RTP analyzer but that plays without any sound. I've also ...