Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

-1
votes
0answers
45 views

Windows IIS: FTP 530 Error, but not everywhere (sniffed log attached)

Got server (Windows Web Server 2008R2, IIS 7.5) with ftp server, attached to domain ftp.example.com. Problem is Unreal Commander can create FTP connection to that server, but browsers and other ...
0
votes
0answers
10 views

How do I find out to what hostname a potential malware wants to connect?

Without connecting my computer to Internet. I can only think about netstat and packet capturing tools, but I dont really know which method is suitable.
0
votes
1answer
13 views

Safe Capture of WAN Packets

I have an aggregating network tap between my WAN connetion and my home router. I have a dedicated machine running Wireshark to capture all WAN traffic via the network tap. This machine is running ...
0
votes
1answer
42 views

Listen for Wake-on-LAN requests on windows platform

We would like to search for Wake-on-LAN packet senders within our network from our Windows machines (mostly Windows 10). The solution described by Chaos applies only to Linux. Is there also a ...
0
votes
2answers
77 views

Wireshark to capture all IP devices on a network

I have a Windows PC with hardwired Ethernet and two wireless Linux devices on a LAN. My Wireless router is an Asus RT-AC68U. The Windows PC is running Wireshark. I would like to capture all network ...
0
votes
2answers
75 views

Sniff packets from router

So I have TP-Link router and I want to sniff all the packets going through the router. I'm using Wireshark right now but not able to get the packets which passes through my router. So What I've tried ...
0
votes
0answers
15 views

How to modify HTTP Responses on android?

I have an Android Device which is capable of running both Linux And Android Side by side, I need to keep checking the packets being sent by the device to a particular domain, And when the domain meets ...
1
vote
2answers
40 views

Listing all devices connected to a simple router remotely

I have two simple routers given to me by my ISP. One is Technicolor TC7200 and the other one is Thomson TWG870UG. I would like to remotely list all of the devices connected to the router (their IP and ...
0
votes
0answers
17 views

Can a virtual adapter work in promiscuous mode even if the host is not configured as such?

I am currently running Wireshark to sniff my own network. My network landscape looks like this: DLINK Router (192.168.0.1) Windows 7 Physical Machine (192.168.0.2) Kali Linux Virtual Machine ...
2
votes
1answer
146 views

Capturing traffic by HTTP host name, not by IP, via WireShark

I'm trying to filter traffic only to a given HTTP host name. I have a server, and I have dozens of websites on it. It only has one interface and one IP address. Thus filtering to my IP address is not ...
0
votes
0answers
137 views

monitor and log LAN network traffic on CentOS 6.x

I've been fiddling with this one for almost a week now. My setup is: LAN (windows/linux PCs/servers) <-> CentOS gateway/firewall box <-> ISP I'm trying to setup a monitoring solution which ...
0
votes
1answer
60 views

How to capture traffic in monitor mode when you know the password

I have turned on the monitor mode using airmon-ng start wlan0 and I can see this when I do iwconfig: mon0 IEEE 802.11bgn Mode:Monitor Tx-Power=20 dBm Retry short limit:7 RTS ...
0
votes
0answers
13 views

Is there a light exe / sniffer to ensure that certain traffic is traveling over intended ports to validate vpn/ssh settings?

I'm using ssh and split-tunneling vpn and I'd like to get a log of which traffic is sent over which ports. Is there a simple software to do this? Is there a way to easily show this over wireshark ...
-1
votes
1answer
155 views

how can I sniff Bluetooth traffic coming from my and another device?

I am trying to debug some Bluetooth traffic. I have one windows computer that I have full access too, I have an android phone, and I have a wireless hardware device. I want to know if there is a way ...
0
votes
0answers
76 views

Bluetooth Capture Interface missing on Wireshark / Kali Linux 1.1.0a

I'm trying to capture local bluetooth traffic from my device running Kali Linux 1.0.0a with wireshark. However, the bluetooth capture interface is not shown. According to the documenation it should be ...
2
votes
5answers
554 views

Can I collect wireless packets using Wireshark while being connected to the Internet via cable?

I am working on a PC which is connected to my router using a LAN cable, and the other computers in my house are connected to my router using WiFi. We are all connected to the same network, so I ...
1
vote
2answers
1k views

Sniffing wireless LAN network using tcpdump

If I correctly understood the basics of the wireless working, I should be able to sniff the traffic of other computers over the wireless LAN. So I connected a second computer to my wireless LAN and ...
0
votes
1answer
100 views

iperf and Wireshark show different data rate

I was testing the capture performance of a sniffer application in Linux. I have a Windows machine that sends UDP multicast packets to the capture port of the sniffer system using iperf at 8Mbits/s. I ...
0
votes
0answers
270 views

Problem creating evil twin using airbase-ng

I am trying to create an evil twin access point using airbase-ng.I am creating a hotspot using my mobile and connecting anther mobile to this hotspot.Now I am trying to create an evil twin access ...
0
votes
0answers
53 views

Monitor TCP port traffic and get a sound alert when a specific text string is found on Windows

I need to watch a port for several hours and make an audible alert whenever a specific string comes through. Windows only. Is this possible with Wireshark or another sniffer tool or maybe a sniffer ...
0
votes
0answers
95 views

sniffing network traffic using arp spoofing

I am experimenting with some network sniffing tools. I like the idea of arp spoofing [explained here] but I have two questions: Does arp spoofing technique affect the speed of the connection of the ...
0
votes
0answers
61 views

Force windows incomming VPN connection to use Proxy

My target is to observe all the Network traffic from my Android device without rooting it: I installed charles proxy on my pc an endabled the socks proxy I created an "New Incoming Connection" on my ...
4
votes
0answers
198 views

why am I not seeing traffic using TCPDUMP while sniffing on wireless interface with the station in WDS mode

I've 2 wireless interfaces one has the type of AP and the other has the type monitor. the AP is attached to a bridge br-lan. When I run for example: tcpdump port 5201 -s 0 -ni wlan0 TCPdump is ...
0
votes
1answer
208 views

COD4 Linux game server doesn't send UDP packets as response to broadcast

I am setting up a bunch of Game servers for a medium sized LAN tournament using CentOS 6 and the various Linux binaries used for the game servers. With COD4 the servers did not show up in the server ...
0
votes
0answers
66 views

Reading packets with Wireshark

How do I read packets captured with Wireshark. I was finally able to capture incoming and outgoing data in hopes of developing something along the lines of an IDS. Thanks in advance for the help. A ...
0
votes
2answers
379 views

Command for removing monitor/promisc from an adapter on OSX Yosemite

How do I accomplish this? I see posts on how to turn it on with the Apple802.11.framework but nothing on turning it off. I ran wash and now I’m currently stuck on monitor mode. Please help! sudo ...
0
votes
0answers
60 views

Wireshark capture file: getting “missing packet” now, was not there 1 year ago

I captured data on a LAN. I then opened the pcap file with wireshark and could extract an email which was sent unencrypted on purpose. Means, I selected a package from the email and used "follow TCP ...
0
votes
0answers
15 views

Redirect outgoint traffic on port to incoming on other port

I would like to redirect packets that are send from localhost to some other port in network, to other port on localhost. Example: Application sends data to 145.125.130.20 port 3554. I would like to ...
-1
votes
2answers
235 views

Requirements for successful WIFI sniffing

I want to know what conditions have to be met that WIFI sniffing is easy possible. Normally, you have a WPA2 encryption, but the question is if this is enough. To my questions: Who can sniff the ...
0
votes
0answers
67 views

HTTP Sniffing using wireshark

I am using Wireshark on my Mac, which is running Yosemite. When I am sniffing the HTTP protocol, I can only see the HTTP/get and I cannot see the HTTP/OK.. Is there a way to enable this on my MAC? I ...
0
votes
2answers
4k views

How do I put my wireless interface back into managed mode from monitor mode in Mac OS X without rebooting?

On Mac OS X, I can turn my wireless interface in monitor mode, as explained in a 2007 OSXdaily article. I can also use the integrated Wireless Diagnostics utility to do so. Unfortunately, none of ...
1
vote
0answers
278 views

Trying to use mdk3 with Alfa AWUS036NHA, wireshark detects frames but cannot detect network

I'm testing out some various tools, trying to get them to work, but I cannot seem to get the MDK3 beacon flooding mode to work. I'm currently running Debian with a few Kali repositories installed. I'm ...
0
votes
0answers
61 views

Wifi sniffing only outgoing packets

When I am setting my wifi card in monitor mode and disconnecting it from wifi I am able to sniff every packet coming in and out from my tablet (http requests and responses) but when I connect to ...
0
votes
1answer
785 views

Setting promiscuous mode in WIFI card

I am on a home network behind a router and I want to capture traffic b/w router and other devices like PCs. All the devices are connected using Wi-Fi with the router. My Wi-Fi driver is ath9k, I ...
0
votes
1answer
56 views

Check if I'm supervised [closed]

Is there any software that I can use to check If my computer is supervised? I want to know if anyone is sniffing my traffic out of my computer with wireshark or another software. Is this possible?
1
vote
1answer
392 views

How to detect TOR usage with Wireshark?

I use TOR inside a Virtual Machine. I run Wireshark on my Host. I want to detect TOR usage (for learning/studying) with Wireshark but don't know how. I've tried this: ...
0
votes
1answer
434 views

How to route a Router's wired WAN through my PC's Wireless LAN?

I've got an old Cisco WRT54GS router that I'm wanting to use to create a "experimenting" network. [ I want to packet sniff my 3DS, basically ]. My desktop has a wireless card that I use to connect to ...
-1
votes
1answer
182 views

Check URL's that used by client of my private WIFI

I have in my home internet with an access point with WIFI. Sometimes I see that my speed is really getting down. is theres a way I can listen to MY OWN network and to see the address that were entered ...
1
vote
2answers
360 views

How do capture filters in Wireshark work internally?

I am wondering exactly what happens internally in TShark when I use a capture filter. Specifically, let's say I have the following filter to capture multicast data: host 224.0.26.3 && port ...
-1
votes
1answer
79 views

Modify a packet's content on DD-WRT

I need to modify incoming data to my network. Specifically, I want to modify all responses from a specific internet site so it doesn't show a certain HTML element. Is this possible with ...
1
vote
2answers
279 views

SSL sniff VirtualBox

I'm trying to sniff ssl traffic from a VirtualBox I created (Android). I'm using the build-in pcap system of VirtualBox to sniff regular traffic, but obviously that doesn't work for ssl. What I'm ...
0
votes
1answer
241 views

Is it possible to sniff packets on other subnetworks?

I've been reading about packet sniffing and was wondering if it's possible for someone to sniff packets on subnetworks other than the one they're on. Since the point of a subnetwork is that devices ...
0
votes
1answer
194 views

Can't capture inbound/outbound messages in Fiddler

.NET interferes with localhost traffic (there's already a lot of threads open on that topic), but something else is mangling my ability to see traffic to/from my server. I know this because I am ...
0
votes
2answers
37 views

What does this hex value mean in source column within NETMON?

I am using NETMON to try and figure out why my local network is running so slow. I think it may be related to a system logged into it, but in order to not draw attention to my task i have been ...
0
votes
2answers
255 views

scary adware , all links in websites using google analytics goes to ad page

i had no problem until yesterday but today i noticed when i click any links it redirects me to http://www.ultrafiles.net/7cc02b3a/url/MY-LINK-HERE which looks like this: the picture above i tried ...
2
votes
0answers
197 views

What might be causing specific IPv6 HTTPS servers to send an excessive number of RST packets?

Client browsers on my IPv6-enabled home network hang and time out when attempting to load https:// URLs from specific IPv6 sites, such as ones operated by CloudFlare. In those situations, the live log ...
1
vote
0answers
166 views

Sniffing Application Network Traffic on Windows

I have an application running on my computer which communicates with a server over Windows-VPN. I would like to sniff the traffic between that app and the server but Wireshark f.x. will only show me ...
0
votes
3answers
2k views

Network Sniffer identifying strange requests to *.crdui.com

So I just downloaded a Network Sniffer on my local machine, as I think something is going on. As soon as I opened it, selected my network adapter (an LTE stick), it started showing me requests from ...
1
vote
2answers
102 views

Relay/forward captured packtes

Fellow members, Got a small question, How can one relay/forward the packet captured on unix/linux machine to a network device using ftp/tftp/any other mechanism. I've got a wireless network ...
1
vote
0answers
489 views

how to sniff from a TP-Link ADSL modem?

I have a PC and a tablet that connected to a TP-Link ADSL modem. PROBLEM: I want to see the packets that send and receive from my modem not my PC( to see both wire and wireless packets) I search ...