Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

0
votes
0answers
17 views

Where to find FireBug (firewire bus sniffer) for mac? [on hold]

I need to sniff my firewire-like home lab. I read somewhere online that there exists a firewire bus sniffer called FireBug. Firstly, I tried Wireshark but since it does not support a firewire it was ...
-1
votes
1answer
29 views

How to sniff download information of different pc's on a network(router)

I am making a Log Analyzer for downloads on a network by different users. So I want to know who downloaded what in the same network (WLAN). How can I sniff this information from other users of the ...
0
votes
1answer
17 views

Intercept HTTPS traffic of a IP energy consumption monitor device

I have this device connected to my home network, and I'm curious about what it's sending to the Internet. It seems to generate a lot of traffic. I've connected it to my laptop and I've shared the ...
0
votes
2answers
74 views

Wireshark filtering for one network

How do i make Wireshark filter results so it just shows results from one wifi net work. I have had a look on Google but found nothing. Can any one help.
0
votes
0answers
16 views

How to capture HTTP headers to particular url in my Ubuntu computer?

I am connecting a website and can see the hearders by firefox inspect tool. I like to do it from outside of the browser for particular url acceses. How can I do it in my Ubuntu computer?
0
votes
0answers
29 views

Can't catch packet using jpcap

To sniff the hidden URL of videos, I use Jsoup to connect the page and use Jpcap to catch the packets from the hidden server, but what Jpcap catches is null.Here is the code: Receiver.java public ...
0
votes
0answers
17 views

Hidden network interfaces

I'm trying to list all network interfaces in a linux server (network sniffer). When I use the command tcpdump -D is shows only the managing ports and lo. Are the other ports hidden some way? Is there ...
1
vote
1answer
29 views

Looking for a tool to inspect HTTP data between a mobile phone and AV receiver

I am trying to dissect the protocol used by my AV receiver and its mobile app on my phone. Basically, I'd like to see all the GET/POST requests from the app on the phone and the responses from the ...
1
vote
2answers
81 views

How to I capture HTTP header traffic in my home network

I'm trying to experiment with some HTTP data for a personal project. What I would like to do is capture all the HTTP traffic that passes through my Wifi Router at home and use that data for some ...
0
votes
1answer
31 views

WiFi connection lags from time to time

My home LAN connection lags from time to time (approx once a minute). This is noticeable by temporary pauses of continuos operations like file copying, RDP working and video playback with small ...
0
votes
0answers
13 views

How to keep socket visible after closing the connection?

Is it possible to configure Linux to keep a tcp connection visible for netstat/lsof after being closed? (doesn't matter the connection state). I need to detect it with netstat/lsof but if the ...
0
votes
2answers
563 views

Connecting PS4 through SonicWall TZ100 firewall | Sony Error NW 31162-3

I am attempting to Connect my PlayStation 4 through my SonicWall TZ100. I have below Ports Forwarded. I'm not great with Packet capturing, but as far as I can tell nothing is getting bounced that is ...
0
votes
2answers
88 views

How many bytes of a WLAN packet do I have to examine to extract MAC addresses?

How many bytes of a 802.11 (WLAN) packet do I have to examine to be able to extract source, destination, receiver and transmitter adress from the header? This image suggests the header length of a ...
1
vote
2answers
91 views

How to view other lan users packets via wireshark

It seems that I can only view my own packets, how to view other lan users packets via wireshark?
31
votes
5answers
2k views

What stops an internet router from sniffing my traffic?

Packets travel through internetworks, and take many routes through internet routers. On each route that forwards traffic to another until reaching the ultimate destination, what stops them from ...
0
votes
1answer
25 views

Is there a way to limit number of packet captures with tcpflow?

I want to limit the number of captured packets, such as: tcpdump -c 20 I want to use tcpflow instead. Is this possible? The console throws a syntax error using tcpflow with the -c parameter. edit - ...
0
votes
0answers
90 views

Disable TCP checksum validation in Microsoft Network Monitor 3.4

I am using Microsoft Network Monitor 3.4 to analyse some packet captures. The hardware that the packets are being captured on use TCP checksum offloading, which means that the TCP checksum data in ...
1
vote
1answer
656 views

Sniffing the Router for Packets

I have used WireShark software to sniff my Network Interface. What if i wanted to sniff the router that what other computers on the network are doing? Is there any way to do that? Computers are ...
1
vote
2answers
503 views

Wifi password VS MACs filtering - in terms of speed vs security

Background First I need to say that I know about how better it is to secure the wifi network even with WEP , than to not secure it at all, and I know there is a thread asking a similar question like ...
1
vote
1answer
335 views

Unable to capture wifi traffic with wireshark

Even a few days ago everything was fine, but now simply I can't capture and see tcp, http, etc. wifi traffic but only the traffic for the protocols 802.11 and LLC. I used different wifi spots ...
1
vote
1answer
2k views

Serial port sniffer / monitor / logger software for Windows 7, 64-bit?

Question edited. Need to understand the serial communication protocol between a USB device and PC, that uses serial over USB communication. I was planning on using a software based approach for ...
0
votes
1answer
91 views

how to see the communication between client and server (string form)

I have a client-server application. The problem is the server is not able to support as many client as being mentioned in the specs or as being claimed by the provider. What i am trying to is to ...
1
vote
2answers
287 views

Why can't nc / netcat sniff http port traffic easily?

I'm NOT looking for advice such as "try wireshark." I'm trying to understand what netcat is and isn't. When I try to listen (-l) to port 80, it says "address already in use." Can netcat not listen to ...
2
votes
1answer
2k views

Wireshark - How do i filter the TCP[RST] packet?

I am looking for filter out the TCP[RST] packets on wireshark. I have tried tcp.analysis.flag but it didn't help.
2
votes
1answer
346 views

Change TCP sequence numbers for packet replay?

First off, I'm using wireshark for capture and colasoft for replay. I'm attempting to replay a group of captured packets back, looped to be done several times over (the purpose of this is just to send ...
0
votes
1answer
89 views

Hexadecimal Values Are Seemingly Backwards When Analyzing Packets Using Wireshark

Using Wireshark I am trying to debug an error that I am experiencing with one of my applications. I am having difficulty understanding how the packet contents are being formatted and displayed in ...
0
votes
1answer
220 views

How can I capture packets belonging to a certain process

I need to capture packets belonging to a program or process. I know Winshark, but it just displays network traffic in a mess (in my view). If one wants to get the packets of a given process, you must ...
0
votes
0answers
97 views

Actual Destination IP instead of Proxy's IP in traffic capture

I want to capture the network traffic of my host through wireshark and need to get the source and destination ip addresses from the packets. The problem I am facing is that I am behind Proxy Server ...
0
votes
0answers
59 views

Check whether a packet contains some fields and then log all subsequent ones in Wireshark

How can I write a filter in Wireshark that checks if the first packet has some field, then checks the new packets for another field, and if they matched, show what you got: if (someone has my valid ...
0
votes
2answers
97 views

Is sending syslog events over udp secure?

I'm considering using a service from papertrailapp.com (other similar services are loggly and splunk), where you configure your syslog to echo events to it over udp. It involves adding this entry to ...
0
votes
2answers
871 views

Wireshark - Help seeing all network traffic

I have a Ralink RT3290 802.11bgn Wi-Fi Adapter and am running Windows 8. Sadly although my new computer helps in the design and testing of my touch based applications, my Network Engineering abilities ...
0
votes
1answer
69 views

Need a creditable source on specifics of Promiscuous and Monitor WNIC modes?

Having searched a great deal of websites to find an explicit statement about the specifics of Promiscuous and Monitor mode as used in WNICs, I finally found this in Spiff's answer to: Wireless Card ...
4
votes
2answers
92 views

wifi router is masking ip addresses

I have a rookie question regarding routing and wifi access points. Background I have a main switch (cisco catalyst 2950) that sits behind my router/firewall. On that switch I have an IDS (snort) ...
1
vote
1answer
176 views

Lightweight network packet capture solution for windows? [closed]

I'm looking for a lightweight packet capture solution for Windows. It needs to capture all packets on a physical network device and write them to a file (preferably .pcap, because that's easiest for ...
1
vote
2answers
92 views

Tracking information on HTTPS connection

My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
1
vote
1answer
231 views

SSH tunneling commands for better security and privacy

i have a centos 6 VPS. I use ssh -p 443 -D 8080 -f -C -N root@ip on mac terminal for SSH tunneling but with wireshark when i sniff my traffic i can see DNS requests are not encrypted ! (i use ...
0
votes
3answers
1k views

Sniff traffic coming from one particular application?

Basically I'd like to sniff HTTP requests made by an .exe on Windows. I tried using wireshark, but it's somewhat unhandy since it sniffs all traffic on the interface. Are there any alternatives?
0
votes
1answer
309 views

Looking for a simple home network analyzer for Windows/OS X

My home wireless network has gotten horribly slow and I'd like to figure out which of the various computers connected (and ideally what program on that machine) is eating up all of the bandwidth. Is ...
2
votes
3answers
360 views

Are SSH protocol headers sent in the clear over a client-server connection?

I know routing information is always sent in the clear (oversimplification, but bear with me) so in a scenario where there exists an SSH tunnel between a client and a server using non-standard ports, ...
0
votes
2answers
4k views

Sniffing and logging HTTP Traffic through my wireless router

This is probably a newb question, so sorry for that. I want to sniff traffic going through my wireless router. The router is provided by my cable company, so I don't want to flash the firmware or ...
1
vote
2answers
555 views

What can I use to track application internet usage? [closed]

I want to see what connections my Modern UI apps are making, and more specifically, where they are sending information, what the protocol looks like, headers, etc. Is there a program that can help me ...
0
votes
1answer
158 views

Why do DNS queries use loopback interface?

Sniffing (using Wireshark), for didactical purpose, my loopback interface on Ubuntu 12.04, I noticed that a lot of DNS queries (maybe ALL of them) have 127.0.0.1 as source and destination address. ...
1
vote
1answer
312 views

Need advice on using Wireshark + aircrack-ng

I am making acquiantance with wireless security and attacks and was told to run some tests with aircrack-ng and wireshark. So I installed both of them and ran airmon to switch wi-fi card to monitor ...
5
votes
5answers
410 views

Download videos from youtube as I see it

This may seem a somewhat strange requirement : I want to download youtube videos as I see it. I know that I would have to capture the packets using a program like wireshark , and I do know that this ...
-1
votes
1answer
439 views

Monitor and view contents of incoming and outgoing internet traffic in Windows [duplicate]

Possible Duplicate: Software for measuring internet traffic? In the Chrome developer tools, I can easily monitor traffic that comes into and out of the browser. Is there a way to monitor ...
1
vote
1answer
187 views

Unknown Inbound UTP Packets

I need some help figuring out something. I was looking at my network traffic using Wireshark and I saw a bunch of inbound UTP (uTorrent Transport Protocol) packets to my IP. About 10 different IP's ...
2
votes
2answers
404 views

Program to record data transmission between two computers using a TCP port

I am looking for a way to view data being transmitted over a TCP port between two computers. Is there a software package that allows this? I suppose I could script something to re-route data coming ...
0
votes
0answers
31 views

how can i capture packets from my router to a server [duplicate]

Possible Duplicate: How can I capture packets going from my router to a specific server? I have a small local network in my house that has two computers connected to a modem-router. i would ...
2
votes
4answers
16k views

How can I capture packets going from my router to a specific server?

I have a small local network in my house that has two computers connected to a modem-router. I want to capture the packets going from the router to a specific server (I know the IP address of the ...
1
vote
1answer
247 views

How to disable network traffic on windows 7

I am having Windows 7 hosted on VMWare which is running on Windows7 as well. My guest W7 is using my client network card as NAT. Now i want to monitor some traffic from some specfic website. I ...