Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

1
vote
2answers
223 views

How to view other lan users packets via wireshark

It seems that I can only view my own packets, how to view other lan users packets via wireshark?
34
votes
5answers
3k views

What stops an internet router from sniffing my traffic?

Packets travel through internetworks, and take many routes through internet routers. On each route that forwards traffic to another until reaching the ultimate destination, what stops them from ...
0
votes
1answer
31 views

Is there a way to limit number of packet captures with tcpflow?

I want to limit the number of captured packets, such as: tcpdump -c 20 I want to use tcpflow instead. Is this possible? The console throws a syntax error using tcpflow with the -c parameter. edit - ...
2
votes
1answer
4k views

Sniffing the Router for Packets

I have used WireShark software to sniff my Network Interface. What if i wanted to sniff the router that what other computers on the network are doing? Is there any way to do that? Computers are ...
1
vote
2answers
2k views

Wifi password VS MACs filtering - in terms of speed vs security

Background First I need to say that I know about how better it is to secure the wifi network even with WEP , than to not secure it at all, and I know there is a thread asking a similar question like ...
1
vote
1answer
2k views

Unable to capture wifi traffic with wireshark

Even a few days ago everything was fine, but now simply I can't capture and see tcp, http, etc. wifi traffic but only the traffic for the protocols 802.11 and LLC. I used different wifi spots ...
1
vote
1answer
6k views

Serial port sniffer / monitor / logger software for Windows 7, 64-bit?

Question edited. Need to understand the serial communication protocol between a USB device and PC, that uses serial over USB communication. I was planning on using a software based approach for ...
0
votes
1answer
163 views

how to see the communication between client and server (string form)

I have a client-server application. The problem is the server is not able to support as many client as being mentioned in the specs or as being claimed by the provider. What i am trying to is to ...
1
vote
2answers
672 views

Why can't nc / netcat sniff http port traffic easily?

I'm NOT looking for advice such as "try wireshark." I'm trying to understand what netcat is and isn't. When I try to listen (-l) to port 80, it says "address already in use." Can netcat not listen to ...
2
votes
1answer
5k views

Wireshark - How do i filter the TCP[RST] packet?

I am looking for filter out the TCP[RST] packets on wireshark. I have tried tcp.analysis.flag but it didn't help.
2
votes
1answer
893 views

Change TCP sequence numbers for packet replay?

First off, I'm using wireshark for capture and colasoft for replay. I'm attempting to replay a group of captured packets back, looped to be done several times over (the purpose of this is just to send ...
0
votes
1answer
177 views

Hexadecimal Values Are Seemingly Backwards When Analyzing Packets Using Wireshark

Using Wireshark I am trying to debug an error that I am experiencing with one of my applications. I am having difficulty understanding how the packet contents are being formatted and displayed in ...
0
votes
1answer
503 views

How can I capture packets belonging to a certain process

I need to capture packets belonging to a program or process. I know Winshark, but it just displays network traffic in a mess (in my view). If one wants to get the packets of a given process, you must ...
0
votes
0answers
249 views

Actual Destination IP instead of Proxy's IP in traffic capture

I want to capture the network traffic of my host through wireshark and need to get the source and destination ip addresses from the packets. The problem I am facing is that I am behind Proxy Server ...
0
votes
2answers
240 views

Is sending syslog events over udp secure?

I'm considering using a service from papertrailapp.com (other similar services are loggly and splunk), where you configure your syslog to echo events to it over udp. It involves adding this entry to ...
1
vote
2answers
2k views

Wireshark - Help seeing all network traffic

I have a Ralink RT3290 802.11bgn Wi-Fi Adapter and am running Windows 8. Sadly although my new computer helps in the design and testing of my touch based applications, my Network Engineering abilities ...
0
votes
1answer
86 views

Need a creditable source on specifics of Promiscuous and Monitor WNIC modes?

Having searched a great deal of websites to find an explicit statement about the specifics of Promiscuous and Monitor mode as used in WNICs, I finally found this in Spiff's answer to: Wireless Card ...
4
votes
2answers
134 views

wifi router is masking ip addresses

I have a rookie question regarding routing and wifi access points. Background I have a main switch (cisco catalyst 2950) that sits behind my router/firewall. On that switch I have an IDS (snort) ...
1
vote
1answer
371 views

Lightweight network packet capture solution for windows? [closed]

I'm looking for a lightweight packet capture solution for Windows. It needs to capture all packets on a physical network device and write them to a file (preferably .pcap, because that's easiest for ...
1
vote
2answers
162 views

Tracking information on HTTPS connection

My organization uses cyberoam firewall. They are monitoring all activities including my search text in Google, Wikipedia etc. So recently i changed to HTTPS versions and now using HTTPS connections of ...
1
vote
1answer
282 views

SSH tunneling commands for better security and privacy

i have a centos 6 VPS. I use ssh -p 443 -D 8080 -f -C -N root@ip on mac terminal for SSH tunneling but with wireshark when i sniff my traffic i can see DNS requests are not encrypted ! (i use ...
2
votes
3answers
4k views

Sniff traffic coming from one particular application?

Basically I'd like to sniff HTTP requests made by an .exe on Windows. I tried using wireshark, but it's somewhat unhandy since it sniffs all traffic on the interface. Are there any alternatives?
-1
votes
1answer
602 views

Looking for a simple home network analyzer for Windows/OS X

My home wireless network has gotten horribly slow and I'd like to figure out which of the various computers connected (and ideally what program on that machine) is eating up all of the bandwidth. Is ...
3
votes
3answers
807 views

Are SSH protocol headers sent in the clear over a client-server connection?

I know routing information is always sent in the clear (oversimplification, but bear with me) so in a scenario where there exists an SSH tunnel between a client and a server using non-standard ports, ...
2
votes
2answers
13k views

Sniffing and logging HTTP Traffic through my wireless router

This is probably a newb question, so sorry for that. I want to sniff traffic going through my wireless router. The router is provided by my cable company, so I don't want to flash the firmware or ...
1
vote
2answers
826 views

What can I use to track application internet usage? [closed]

I want to see what connections my Modern UI apps are making, and more specifically, where they are sending information, what the protocol looks like, headers, etc. Is there a program that can help me ...
0
votes
1answer
303 views

Why do DNS queries use loopback interface?

Sniffing (using Wireshark), for didactical purpose, my loopback interface on Ubuntu 12.04, I noticed that a lot of DNS queries (maybe ALL of them) have 127.0.0.1 as source and destination address. ...
1
vote
1answer
374 views

Capture data that my ADSL modem send

I'd like to capture the data sent by my ADSL modem (what's really sent on the RJ11 cable). I have no access to my modem (no ssh), so I'd like to build a mini-computer with 2 RJ11 plug, one connected ...
1
vote
1answer
479 views

Need advice on using Wireshark + aircrack-ng

I am making acquiantance with wireless security and attacks and was told to run some tests with aircrack-ng and wireshark. So I installed both of them and ran airmon to switch wi-fi card to monitor ...
5
votes
5answers
672 views

Download videos from youtube as I see it

This may seem a somewhat strange requirement : I want to download youtube videos as I see it. I know that I would have to capture the packets using a program like wireshark , and I do know that this ...
-1
votes
1answer
870 views

Monitor and view contents of incoming and outgoing internet traffic in Windows [duplicate]

Possible Duplicate: Software for measuring internet traffic? In the Chrome developer tools, I can easily monitor traffic that comes into and out of the browser. Is there a way to monitor ...
1
vote
1answer
236 views

Unknown Inbound UTP Packets

I need some help figuring out something. I was looking at my network traffic using Wireshark and I saw a bunch of inbound UTP (uTorrent Transport Protocol) packets to my IP. About 10 different IP's ...
2
votes
2answers
526 views

Program to record data transmission between two computers using a TCP port

I am looking for a way to view data being transmitted over a TCP port between two computers. Is there a software package that allows this? I suppose I could script something to re-route data coming ...
0
votes
0answers
31 views

how can i capture packets from my router to a server [duplicate]

Possible Duplicate: How can I capture packets going from my router to a specific server? I have a small local network in my house that has two computers connected to a modem-router. i would ...
5
votes
4answers
35k views

How can I capture packets going from my router to a specific server?

I have a small local network in my house that has two computers connected to a modem-router. I want to capture the packets going from the router to a specific server (I know the IP address of the ...
1
vote
1answer
330 views

How to disable network traffic on windows 7

I am having Windows 7 hosted on VMWare which is running on Windows7 as well. My guest W7 is using my client network card as NAT. Now i want to monitor some traffic from some specfic website. I ...
-2
votes
1answer
483 views

How to read data from ethernet through lan cable [closed]

I want to read raw ethernet data from a PC. What software can I use to capture data to and from a TCP/IP server? In our project we have a PLC that has an ethernet RJ45 socket and serial RS485 plug. ...
1
vote
0answers
419 views

How to get data from sniffed usb communication?

we are trying to get raw measurement data from one usb sensor as the control software is a black box and the manual does not contain anything about how it process the measurements. I was able to ...
0
votes
1answer
481 views

HDI: Capture specific content types in wireshark?

I've been tasked to audit in/outbound traffic at our site, but I don't know much about Wireshark. I understand how to set up a capture filter for broad protocols (IP only or tcp, udp, icmp, etc), but ...
2
votes
1answer
3k views

What speed are Wi-Fi management and control frames sent at?

There are a bunch of different 802.11 Wi-Fi standards, e.g. 802.11a, 802.11b, 802.11g, 802.11n etc. that all support different speeds. Wi-Fi frames are generally categorised as one of the following: ...
2
votes
2answers
22k views

What is the best way to monitor and record the URLs called by device to establish or monitor browsing history?

I have home internet access via Comcast/Xfinity and the router below providing wifi to multiple devices - laptops, iPads, iPhones, iPod Touch. Macs. What is the best way to monitor and record the ...
-1
votes
1answer
65 views

Is there a way I can check what information a piece of software is sending out [duplicate]

Possible Duplicate: How can I sniff traffic sent by POST method (on another computer)? I need to streamline a process for a client. Currently he has some a bit of software which extracts ...
1
vote
0answers
132 views

Sniffing content of web pages in a network - experiment

I want to sniff the web content. Don't worry, no vicious intentions, it is an experiment : ) So the scenario is: I have my host machine, and multiple guest virtual machines running on it. All VMs go ...
1
vote
2answers
1k views

Do machines connected to the same switch belong to the same subnet?

When we talk about a subnet - do we mean all the systems connected to the same switch? If I have an assigned IP address of 10.0.2.1, am I in the same subnet as that of 10.0.1.39? When we talk about ...
1
vote
4answers
200 views

if an outdated, vulnerable but clean Windows machine is connected to network behind router, can it be detected and attacked?

suppose the machine is clean of all malware but not in any sense updated, patched, secured etc. Suppose I connect it to the internet from behind wireless router with the intent of using it only on a ...
0
votes
1answer
135 views

How dropbox knows about my corporate email?

I'm dropbox user. Today I received some promotional email from them and not to my regular email account but on my corporate-one. I NEVER entered that email address in any of the forms while signing up ...
1
vote
2answers
1k views

how to find tcp streams without final ack/fin sequence in a huge packet capture file

I have a huge pcap file which contains a large number of individual tcp streams.But out of these , there are some invalid streams which dont have the final fin/ack sequence. Is there any way i can ...
2
votes
5answers
21k views

How do I limit packet capturing in Wireshark to only a specific protocol?

I would like to listen to HTTP traffic on port 8080. When I start capturing packets in Wireshark, it's flooded by packets using the SSDP protocol on port 1900. I would like to limit the packet ...
1
vote
1answer
1k views

decrypt local ssl traffic (MacOS)

I am trying to reverse engineer a protocol which uses HTTPS exclusively. On Windows I was using oSpy to view the plaintext of local SSL packets, but for MacOS I have not been able to find an ...
2
votes
2answers
162 views

Intercepting web traffic locally

I am currently the victim of some kind of virus. I noticed this when I visited the Barclays site and was presented with some unusual questions about my details that just didn't seem right. After some ...