Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

-1
votes
1answer
513 views

Monitor and view contents of incoming and outgoing internet traffic in Windows [duplicate]

Possible Duplicate: Software for measuring internet traffic? In the Chrome developer tools, I can easily monitor traffic that comes into and out of the browser. Is there a way to monitor ...
1
vote
1answer
197 views

Unknown Inbound UTP Packets

I need some help figuring out something. I was looking at my network traffic using Wireshark and I saw a bunch of inbound UTP (uTorrent Transport Protocol) packets to my IP. About 10 different IP's ...
2
votes
2answers
435 views

Program to record data transmission between two computers using a TCP port

I am looking for a way to view data being transmitted over a TCP port between two computers. Is there a software package that allows this? I suppose I could script something to re-route data coming ...
0
votes
0answers
31 views

how can i capture packets from my router to a server [duplicate]

Possible Duplicate: How can I capture packets going from my router to a specific server? I have a small local network in my house that has two computers connected to a modem-router. i would ...
3
votes
4answers
19k views

How can I capture packets going from my router to a specific server?

I have a small local network in my house that has two computers connected to a modem-router. I want to capture the packets going from the router to a specific server (I know the IP address of the ...
1
vote
1answer
269 views

How to disable network traffic on windows 7

I am having Windows 7 hosted on VMWare which is running on Windows7 as well. My guest W7 is using my client network card as NAT. Now i want to monitor some traffic from some specfic website. I ...
-3
votes
1answer
332 views

How to read data from ethernet through lan cable [closed]

I want to read raw ethernet data from a PC. What software can I use to capture data to and from a TCP/IP server? In our project we have a PLC that has an ethernet RJ45 socket and serial RS485 plug. ...
1
vote
0answers
341 views

How to get data from sniffed usb communication?

we are trying to get raw measurement data from one usb sensor as the control software is a black box and the manual does not contain anything about how it process the measurements. I was able to ...
0
votes
1answer
365 views

HDI: Capture specific content types in wireshark?

I've been tasked to audit in/outbound traffic at our site, but I don't know much about Wireshark. I understand how to set up a capture filter for broad protocols (IP only or tcp, udp, icmp, etc), but ...
2
votes
1answer
2k views

What speed are Wi-Fi management and control frames sent at?

There are a bunch of different 802.11 Wi-Fi standards, e.g. 802.11a, 802.11b, 802.11g, 802.11n etc. that all support different speeds. Wi-Fi frames are generally categorised as one of the following: ...
2
votes
2answers
10k views

What is the best way to monitor and record the URLs called by device to establish or monitor browsing history?

I have home internet access via Comcast/Xfinity and the router below providing wifi to multiple devices - laptops, iPads, iPhones, iPod Touch. Macs. What is the best way to monitor and record the ...
-1
votes
1answer
63 views

Is there a way I can check what information a piece of software is sending out [duplicate]

Possible Duplicate: How can I sniff traffic sent by POST method (on another computer)? I need to streamline a process for a client. Currently he has some a bit of software which extracts ...
1
vote
0answers
128 views

Sniffing content of web pages in a network - experiment

I want to sniff the web content. Don't worry, no vicious intentions, it is an experiment : ) So the scenario is: I have my host machine, and multiple guest virtual machines running on it. All VMs go ...
1
vote
2answers
1k views

Do machines connected to the same switch belong to the same subnet?

When we talk about a subnet - do we mean all the systems connected to the same switch? If I have an assigned IP address of 10.0.2.1, am I in the same subnet as that of 10.0.1.39? When we talk about ...
1
vote
4answers
183 views

if an outdated, vulnerable but clean Windows machine is connected to network behind router, can it be detected and attacked?

suppose the machine is clean of all malware but not in any sense updated, patched, secured etc. Suppose I connect it to the internet from behind wireless router with the intent of using it only on a ...
0
votes
1answer
131 views

How dropbox knows about my corporate email?

I'm dropbox user. Today I received some promotional email from them and not to my regular email account but on my corporate-one. I NEVER entered that email address in any of the forms while signing up ...
1
vote
2answers
467 views

how to find tcp streams without final ack/fin sequence in a huge packet capture file

I have a huge pcap file which contains a large number of individual tcp streams.But out of these , there are some invalid streams which dont have the final fin/ack sequence. Is there any way i can ...
2
votes
5answers
15k views

How do I limit packet capturing in Wireshark to only a specific protocol?

I would like to listen to HTTP traffic on port 8080. When I start capturing packets in Wireshark, it's flooded by packets using the SSDP protocol on port 1900. I would like to limit the packet ...
0
votes
1answer
659 views

decrypt local ssl traffic (MacOS)

I am trying to reverse engineer a protocol which uses HTTPS exclusively. On Windows I was using oSpy to view the plaintext of local SSL packets, but for MacOS I have not been able to find an ...
2
votes
2answers
143 views

Intercepting web traffic locally

I am currently the victim of some kind of virus. I noticed this when I visited the Barclays site and was presented with some unusual questions about my details that just didn't seem right. After some ...
1
vote
2answers
3k views

Replay UDP Packet Capture

I have a UDP packet capture which was streamed from Port1 on IP1 to Port2 on IP2 on network N1. I need to replay these packets on another network N2 from Port3 on IP3 to Port4 on IP4. I need to know ...
2
votes
2answers
127 views

How does HTTPS avoids the key for encryption to be sniffed in the first place?

When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right? So, to do that, at some point the key have to travel unencrypted from one computer to ...
1
vote
1answer
701 views

Filtering sniffed logs using Wireshark

I'm experimenting with packet sniffing and log examination using Wireshark, and I'm quickly realizing that I'm not nearly as safe as I should be when using public hot spots. In efforts to better ...
5
votes
4answers
3k views

Get active network interface on Windows

I'm developing an application that provides a UI to windump, the packet sniffer. Windump has a "-D" parameter that lists all network interfaces it can find, and then you can specify which interface to ...
1
vote
1answer
79 views

Quick and easy setup for Packet Sniffing/Network Collection

I'm doing some research right now where I want to monitor a group of individuals uses of the web (with permission, of course). I'm looking for the cheapest, and easiest way to collect network ...
0
votes
1answer
2k views

Wireshark sniffing “microsoft-ds [syn] seq=0..”

I'm new to wireshark. (installed it today) I'm just looking at the traffic and noticed this kind of packages: 60261 microsoft-ds [syn] seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1 its sent to ip: ...
2
votes
6answers
444 views

On a switched network, why do unicast packets not addressed to me reach my NIC when I'm in promiscuous mode?

When I'm connected to a switch, the switch knows which MAC address belongs to which port. So even when I'm in promiscuous mode, why do I receive unicast packets that are addressed to other MAC ...
2
votes
0answers
187 views

Is there a software that allows RS232 sniffing and TCP/UDP listening

I am looking for a software that would fulfill the following requirements: Able to "sniff" communication over RS232 (like PortMon and Advanced Serial Data Logger) Able to listen to a given ...
5
votes
1answer
2k views

How can I use Teamviewer anonymously with TOR network?

I would like to be able to use Teamviewer anonymously to avoid revealing my real IP address while I access sensitive data on my remote server. The data being transferred is encrypted. I have looked ...
2
votes
2answers
395 views

Packet sniffer for router in windows

Is there a packet analyzer for windows for analyzing packets that passes through the router?
1
vote
1answer
497 views

Sniff my own Packets (non-Administrator)

Running in Windows (Windows 7), I'm trying to sniff my browser's requests. I can install tools that sniff packets for all users, and require high permissions. But, I would like to just run a tool to ...
0
votes
1answer
6k views

How to set CommView to capture a specific wifi instead of the whole channel?

I am trying to experiment with CommView for Wifi. When I start searching for devices their are separated in channels. I click on the one I want and then Capture. As I see the program is capturing the ...
-2
votes
1answer
1k views

Http analyzer free alternative? [closed]

Are there any free alternatives for this app ?? http://www.ieinspector.com/httpanalyzer/ It's great, it monitors all open http requests and downloaded size. Any suggestions please ??
1
vote
1answer
111 views

What should I consider when shopping for a private VPN?

I frequently rely on public wireless connections when I'm on the road, so to minimize the risk of session hijacking and packet sniffers I would like to start routing all of my connections through a ...
3
votes
2answers
4k views

Can anyone read (sniff) my Google Talk messages?

When I use Google Talk over https://gmail.com can anyone read (sniff) my messages?
1
vote
1answer
99 views

When connected to a secure WiFi network, is your traffic safe from others on the same network?

If two users are on the same secure WiFi network, is there a way to sniff the traffic like you might on an unsecure network?
4
votes
2answers
924 views

Unable to capture outgoing traffic with Wireshark on wi-fi network

I'm trying to use Wireshark on Backtrack 5 to capture packets that are transmitted through my home wi-fi network. I'm perfectly able to capture outgoing traffic from localhost and, it seems, incoming ...
2
votes
1answer
2k views

Sniff process communication on Windows 7

I have two local processes which communicate to let the other execute commands. And I want to know what they are talking about. After some first investigation, it's not over Sockets or Loopback, but ...
1
vote
0answers
280 views

SocketSniff equivalent for 64-bit applications

SocketSniff allows you to watch the Windows Sockets (WinSock) activity of the selected process. On x64 version of Windows, SocketSniff can only work with 32-bit programs. Is there any SocketSniff ...
1
vote
1answer
205 views

Looking for tool to show IP packets (and do analysis) sent/received from/to my machine (want to debug why can't mount network drive)

fiddler2 comes close but this only deals with web browsers it seems. I need this tool to debug why I can't mount a common standard network/NAS drive (e.g. via SMB/SAMBA) in Windows 7 Pro and Home. ...
3
votes
2answers
4k views

How to make tcpdump (or other tool) to actually dump TCP stream?

I expect something like this: $ nc example.com 80 GET / HTTP/1.0 HTTP/1.0 500 K.O. Content-Type: application/null Content-Length: -1 $ Meanwhile: # tcpdump -i eth0 --actually-dump-all-tcp ...
6
votes
3answers
2k views

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! ...
7
votes
2answers
753 views

On an unencrypted public wi-fi hotspot, what exactly is a packet sniffer doing to get another computer's packet?

I get mixed results when reading information security articles, some of them stating that in order to do something similar you need to also setup some sort of honeypot with a running access point and ...
1
vote
2answers
861 views

Networking packet sniffer for Linux that captures the application names?

I tried Wireshark. It shows the source and destination IP address, port number, and packet contents, but nothing about which application is using the packets. Apparently tcpdump is similar; network ...
5
votes
1answer
1k views

Is there a popular application for Windows 7 to find nearby WiFi networks?

I was wondering if we can use a third party program, besides "Network and Sharing Center," to find WiFi networks. Is there a popular and recommended application for Windows 7 that finds WiFi ...
4
votes
1answer
2k views

Can you sniff packets of an open wifi network that you are not connected to?

I mean, just see all the packets going though the air.. is this possible with Wireshark, for example?
7
votes
1answer
8k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
1
vote
1answer
755 views

WinPcap installation error

When installing WinPcap 4.1.2 (as well as earlier versions) I get the following error: An error occurred while loading the WinPcap Install Helper DLL I checked the WinPcap FAQ but there was ...
0
votes
0answers
4k views

How do I make tcpdump to write to file for each packet it captures?

I'm running the following version of tcpdump: tcpdump version 4.0.0 libpcap version 1.0.0 I want to make tcpdump write to a file for each packet it captures. Currently, I could only see the ...
1
vote
1answer
282 views

Suspicious redirection to russian pages. Is government spying us?

Recently when I browse some multi-language websites the default language for them is Russian. An example is www.amd.com which redirects me to the russian page ...