0
votes
0answers
16 views

How to capture HTTP headers to particular url in my Ubuntu computer?

I am connecting a website and can see the hearders by firefox inspect tool. I like to do it from outside of the browser for particular url acceses. How can I do it in my Ubuntu computer?
1
vote
2answers
81 views

How to I capture HTTP header traffic in my home network

I'm trying to experiment with some HTTP data for a personal project. What I would like to do is capture all the HTTP traffic that passes through my Wifi Router at home and use that data for some ...
0
votes
1answer
31 views

WiFi connection lags from time to time

My home LAN connection lags from time to time (approx once a minute). This is noticeable by temporary pauses of continuos operations like file copying, RDP working and video playback with small ...
0
votes
0answers
14 views

How to keep socket visible after closing the connection?

Is it possible to configure Linux to keep a tcp connection visible for netstat/lsof after being closed? (doesn't matter the connection state). I need to detect it with netstat/lsof but if the ...
0
votes
2answers
564 views

Connecting PS4 through SonicWall TZ100 firewall | Sony Error NW 31162-3

I am attempting to Connect my PlayStation 4 through my SonicWall TZ100. I have below Ports Forwarded. I'm not great with Packet capturing, but as far as I can tell nothing is getting bounced that is ...
1
vote
2answers
91 views

How to view other lan users packets via wireshark

It seems that I can only view my own packets, how to view other lan users packets via wireshark?
31
votes
5answers
2k views

What stops an internet router from sniffing my traffic?

Packets travel through internetworks, and take many routes through internet routers. On each route that forwards traffic to another until reaching the ultimate destination, what stops them from ...
0
votes
1answer
25 views

Is there a way to limit number of packet captures with tcpflow?

I want to limit the number of captured packets, such as: tcpdump -c 20 I want to use tcpflow instead. Is this possible? The console throws a syntax error using tcpflow with the -c parameter. edit - ...
0
votes
1answer
92 views

how to see the communication between client and server (string form)

I have a client-server application. The problem is the server is not able to support as many client as being mentioned in the specs or as being claimed by the provider. What i am trying to is to ...
2
votes
1answer
2k views

Wireshark - How do i filter the TCP[RST] packet?

I am looking for filter out the TCP[RST] packets on wireshark. I have tried tcp.analysis.flag but it didn't help.
0
votes
1answer
222 views

How can I capture packets belonging to a certain process

I need to capture packets belonging to a program or process. I know Winshark, but it just displays network traffic in a mess (in my view). If one wants to get the packets of a given process, you must ...
0
votes
0answers
98 views

Actual Destination IP instead of Proxy's IP in traffic capture

I want to capture the network traffic of my host through wireshark and need to get the source and destination ip addresses from the packets. The problem I am facing is that I am behind Proxy Server ...
0
votes
0answers
59 views

Check whether a packet contains some fields and then log all subsequent ones in Wireshark

How can I write a filter in Wireshark that checks if the first packet has some field, then checks the new packets for another field, and if they matched, show what you got: if (someone has my valid ...
0
votes
1answer
69 views

Need a creditable source on specifics of Promiscuous and Monitor WNIC modes?

Having searched a great deal of websites to find an explicit statement about the specifics of Promiscuous and Monitor mode as used in WNICs, I finally found this in Spiff's answer to: Wireless Card ...
4
votes
2answers
92 views

wifi router is masking ip addresses

I have a rookie question regarding routing and wifi access points. Background I have a main switch (cisco catalyst 2950) that sits behind my router/firewall. On that switch I have an IDS (snort) ...
1
vote
1answer
177 views

Lightweight network packet capture solution for windows? [closed]

I'm looking for a lightweight packet capture solution for Windows. It needs to capture all packets on a physical network device and write them to a file (preferably .pcap, because that's easiest for ...
0
votes
1answer
310 views

Looking for a simple home network analyzer for Windows/OS X

My home wireless network has gotten horribly slow and I'd like to figure out which of the various computers connected (and ideally what program on that machine) is eating up all of the bandwidth. Is ...
0
votes
1answer
159 views

Why do DNS queries use loopback interface?

Sniffing (using Wireshark), for didactical purpose, my loopback interface on Ubuntu 12.04, I noticed that a lot of DNS queries (maybe ALL of them) have 127.0.0.1 as source and destination address. ...
5
votes
5answers
411 views

Download videos from youtube as I see it

This may seem a somewhat strange requirement : I want to download youtube videos as I see it. I know that I would have to capture the packets using a program like wireshark , and I do know that this ...
1
vote
1answer
247 views

How to disable network traffic on windows 7

I am having Windows 7 hosted on VMWare which is running on Windows7 as well. My guest W7 is using my client network card as NAT. Now i want to monitor some traffic from some specfic website. I ...
-3
votes
1answer
289 views

How to read data from ethernet through lan cable [closed]

I want to read raw ethernet data from a PC. What software can I use to capture data to and from a TCP/IP server? In our project we have a PLC that has an ethernet RJ45 socket and serial RS485 plug. ...
1
vote
2answers
363 views

how to find tcp streams without final ack/fin sequence in a huge packet capture file

I have a huge pcap file which contains a large number of individual tcp streams.But out of these , there are some invalid streams which dont have the final fin/ack sequence. Is there any way i can ...
2
votes
2answers
126 views

How does HTTPS avoids the key for encryption to be sniffed in the first place?

When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right? So, to do that, at some point the key have to travel unencrypted from one computer to ...
1
vote
1answer
78 views

Quick and easy setup for Packet Sniffing/Network Collection

I'm doing some research right now where I want to monitor a group of individuals uses of the web (with permission, of course). I'm looking for the cheapest, and easiest way to collect network ...
2
votes
6answers
380 views

On a switched network, why do unicast packets not addressed to me reach my NIC when I'm in promiscuous mode?

When I'm connected to a switch, the switch knows which MAC address belongs to which port. So even when I'm in promiscuous mode, why do I receive unicast packets that are addressed to other MAC ...
0
votes
1answer
5k views

How to set CommView to capture a specific wifi instead of the whole channel?

I am trying to experiment with CommView for Wifi. When I start searching for devices their are separated in channels. I click on the one I want and then Capture. As I see the program is capturing the ...
-2
votes
1answer
1k views

Http analyzer free alternative? [closed]

Are there any free alternatives for this app ?? http://www.ieinspector.com/httpanalyzer/ It's great, it monitors all open http requests and downloaded size. Any suggestions please ??
6
votes
3answers
2k views

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! ...
1
vote
2answers
789 views

Networking packet sniffer for Linux that captures the application names?

I tried Wireshark. It shows the source and destination IP address, port number, and packet contents, but nothing about which application is using the packets. Apparently tcpdump is similar; network ...
7
votes
1answer
8k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
1
vote
1answer
729 views

WinPcap installation error

When installing WinPcap 4.1.2 (as well as earlier versions) I get the following error: An error occurred while loading the WinPcap Install Helper DLL I checked the WinPcap FAQ but there was ...
1
vote
1answer
275 views

Suspicious redirection to russian pages. Is government spying us?

Recently when I browse some multi-language websites the default language for them is Russian. An example is www.amd.com which redirects me to the russian page ...
0
votes
3answers
190 views

Is it possible to impersonate another WAP by intercepting communication with other client?

There is a well known WAP that lots of people use. Someone comes in with a laptop equipped with a sniffer. The laptop sniffs people trying to log on to the WAP. It intercepts the connection, and when ...
3
votes
1answer
131 views

Interactive network sniffing

I'm looking for what essentially amounts to an "interactive" Wireshark. I am looking for a tool that allows me to view network traffic on a given port and allow/deny/modify traffic on a per-packet ...
0
votes
1answer
584 views

Network packet editor for Linux?

Anyone know network packet editor for Linux, or a way to modify network packets in wireshark?
2
votes
4answers
1k views

In Windows OS, some background process consuming 75 MB Network data ( BroadBand wastage) everyday. How can I find that background process?

I am using limited BroadBand ( I can use up to 3GB per month). BroadBand company charges extra money if I use beyond 3 GB. Everyday one ( or more) background process utilizing 75 MB of Internet ...
5
votes
5answers
362 views

Looking for a packet builder

Can anyone recommend a quality packet builder? I'm analyzing network traffic (academic purposes) with Wireshark, and I'd like to be able to create packets as well. Open Source is always a bonus. ...
2
votes
3answers
8k views

what's the meaning of TTL=64?

If I'm sniffing my computer and see some packet with TTL=64, does it means that the packet came from a computer inside my network, or it can be anyone in the WWW ? I know what TTL is. But I'm trying ...
22
votes
1answer
15k views

Mac Wireshark alternatives [closed]

Do you know any good alternatives for wireshark (network analyzer) running on a Mac OS X 10.5+? Wireshark is not that handy like on an Windows OS (user interface with X11, ...). Any kind of help is ...
4
votes
3answers
5k views

Capture traffic for specific application

I have an application which communicates with some server. I want to know what the IP of this server is. How can I capture all the traffic from a specific application and not just all the traffic like ...
10
votes
3answers
16k views

Is there a nice, graphical, packet sniffer for Mac OSX?

I have Wireshark and have used tcpdump, but I was wondering if there was a nice GUI to capture and view packets on the Mac. Ideally, something that is protocol aware, so that it knows how to break up ...
0
votes
2answers
4k views

Wireshark does not see interfaces (winXP)

Short story: Wireshark is working....on my winXP-32b ... usage .... Long long time later Wireshark does not work It can't find any usefull interface (just VPN) ipconfig /all Ethernet adapter ...
0
votes
5answers
4k views

How can I sniff traffic sent by POST method (on another computer)?

Suppose there is a site which has a form and it send data through POST method over http (NOT HTTPS)? I can access this website directly and also the victim's computer directly. How can i sniff what ...
14
votes
4answers
14k views

How to sniff for wireless MAC addresses in area - My laptop got stolen

A few days ago my apartment got broken in, and they took all the electronics, including my $1500 laptop. We are pretty sure it's an inside job (as in someone from the same building), so I believe ...
8
votes
4answers
5k views

Windows tool to find out which port an app is trying to use?

I am guessing that netstat shows apps and their ports that already have a connection and it doesn't show or can't show an app that is trying to open a connection. If I have an app that's trying to ...
2
votes
3answers
1k views

Can I do packet sniffing out of the box on OS X?

I'm doing some development, a Java app that communicates via HTTP. The log4j isn't helping me much so I'd like to see the actual HTTP Request that I am creating once it gets sent out. I know that in ...