Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

3
votes
1answer
3k views

Sniff process communication on Windows 7

I have two local processes which communicate to let the other execute commands. And I want to know what they are talking about. After some first investigation, it's not over Sockets or Loopback, but ...
1
vote
0answers
327 views

SocketSniff equivalent for 64-bit applications

SocketSniff allows you to watch the Windows Sockets (WinSock) activity of the selected process. On x64 version of Windows, SocketSniff can only work with 32-bit programs. Is there any SocketSniff ...
1
vote
1answer
209 views

Looking for tool to show IP packets (and do analysis) sent/received from/to my machine (want to debug why can't mount network drive)

fiddler2 comes close but this only deals with web browsers it seems. I need this tool to debug why I can't mount a common standard network/NAS drive (e.g. via SMB/SAMBA) in Windows 7 Pro and Home. ...
4
votes
2answers
5k views

How to make tcpdump (or other tool) to actually dump TCP stream?

I expect something like this: $ nc example.com 80 GET / HTTP/1.0 HTTP/1.0 500 K.O. Content-Type: application/null Content-Length: -1 $ Meanwhile: # tcpdump -i eth0 --actually-dump-all-tcp ...
6
votes
3answers
3k views

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! ...
7
votes
2answers
896 views

On an unencrypted public wi-fi hotspot, what exactly is a packet sniffer doing to get another computer's packet?

I get mixed results when reading information security articles, some of them stating that in order to do something similar you need to also setup some sort of honeypot with a running access point and ...
1
vote
2answers
1k views

Networking packet sniffer for Linux that captures the application names?

I tried Wireshark. It shows the source and destination IP address, port number, and packet contents, but nothing about which application is using the packets. Apparently tcpdump is similar; network ...
5
votes
1answer
1k views

Is there a popular application for Windows 7 to find nearby WiFi networks?

I was wondering if we can use a third party program, besides "Network and Sharing Center," to find WiFi networks. Is there a popular and recommended application for Windows 7 that finds WiFi ...
4
votes
1answer
2k views

Can you sniff packets of an open wifi network that you are not connected to?

I mean, just see all the packets going though the air.. is this possible with Wireshark, for example?
7
votes
1answer
9k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
1
vote
1answer
790 views

WinPcap installation error

When installing WinPcap 4.1.2 (as well as earlier versions) I get the following error: An error occurred while loading the WinPcap Install Helper DLL I checked the WinPcap FAQ but there was ...
1
vote
1answer
294 views

Suspicious redirection to russian pages. Is government spying us?

Recently when I browse some multi-language websites the default language for them is Russian. An example is www.amd.com which redirects me to the russian page ...
0
votes
3answers
297 views

Is it possible to impersonate another WAP by intercepting communication with other client?

There is a well known WAP that lots of people use. Someone comes in with a laptop equipped with a sniffer. The laptop sniffs people trying to log on to the WAP. It intercepts the connection, and when ...
3
votes
4answers
695 views

Packet sniffing and my passwords

I am designing a website and have been learning about POST and GET requests and how POST requests can be read through 'packet sniffing'. Further reading seems to suggest that the data flowing to and ...
0
votes
1answer
1k views

tcpdump not showing all packets? [duplicate]

Possible Duplicate: my tcpdump always filters packets? I've been using tcpdump for about a month now, and recently, it has stopped capturing any packets that were not sent to or from the ...
0
votes
1answer
1k views

tcpdump missing on Cygwin v1.7.7 for packet sniffing

I am trying to debug why my TCP packets are truncated. I see that only the first 24 bytes of each packet are showing up in my program. The 25th through 28th bytes are scrambled and all others after ...
0
votes
2answers
318 views

How to monitor / sniff localhost SVN protocol messages

We have a local SVN client and server on localhost I would like to "sniff" all SVN protocol messages sent to the SVN server How can that be done?
1
vote
1answer
140 views

TCP source and destination ports switch

Why do i see source and destination ports switching with each other in a packet capturing application?
0
votes
1answer
2k views

Logging HTTP traffic on Linux

A bit of a backstory, my brother (in his early teens) has an attention disorder. Often I find him when he is supposed to be doing his homework instead surfing the web. We would ideally like to ...
1
vote
2answers
577 views

How to debug Wifi?

I have Linux soft-ap running hostapd. I want to collect (from air) list of all packets going to this ap from certain address, or, rather, excluding certain MACs since only one master-managed link ...
2
votes
1answer
383 views

Forwarding wifi traffic to wired pc

I'm trying to play around with Wireshark on my home network, and was wondering if there is a way to create a new connection on my PC that receives all wifi packets on the network. The PC is a wired ...
1
vote
2answers
502 views

Utility/Sniffer to track internet traffic/speed of all PCs in local network

It doesn't matter if utility is for Ubuntu or for Windows XP/7, just need to see what pc is using the most traffic in local network. Probably some spammer etc on that pc. Need to get rid of that, ...
3
votes
3answers
12k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
3
votes
1answer
138 views

Interactive network sniffing

I'm looking for what essentially amounts to an "interactive" Wireshark. I am looking for a tool that allows me to view network traffic on a given port and allow/deny/modify traffic on a per-packet ...
0
votes
1answer
677 views

Network packet editor for Linux?

Anyone know network packet editor for Linux, or a way to modify network packets in wireshark?
2
votes
1answer
838 views

Is there a way to sniff packets encrypted with WPA(2)?

I was reading about the recent FireSheep tool. People are saying that it is fine to sniff WPA/2 PSK networks because if you have the PSK, you can decrypt anyone's traffic. I am wondering if there are ...
2
votes
4answers
2k views

In Windows OS, some background process consuming 75 MB Network data ( BroadBand wastage) everyday. How can I find that background process?

I am using limited BroadBand ( I can use up to 3GB per month). BroadBand company charges extra money if I use beyond 3 GB. Everyday one ( or more) background process utilizing 75 MB of Internet ...
4
votes
3answers
7k views

Packet Sniff over Wi-Fi

I've got a non-PC wireless client, and I'm wondering about some of its connections. I want to see the actual packets being exchanged from the net to my device over a Wi-Fi connection. I have ...
7
votes
3answers
10k views

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V ...
1
vote
2answers
84 views

How to find where an application is storing data?

I have been using this program for a long time http://userweb.cs.utexas.edu/users/tbone/stickynotes.html I installed it on a new system and I need to find where it saves information so I can restore ...
5
votes
1answer
21k views

Capturing wireless traffic (using Wireshark)

When I run wireshark on a wired network it works fine and reports all of the packets. When I run it on a wireless network though I only see my own traffic. The wireless card I have is supposed to ...
2
votes
1answer
69 views

Is there a good tool that lets me sniff the network calls?

My objective: Itunes talks to their cloud servers. I want to be able to know which URL they are talking to when I use my Itunes. How can I do that?
0
votes
3answers
250 views

How do I view the location of an swf file that is obfuscated somehow

Specifically, I'm trying to view Elmo's Keyboard-o-rama fullscreen. The original swf file has been moved and obscured. For a toddler, this game really needs to be full screen! The toddler doesn't ...
2
votes
2answers
6k views

Usefulness of packets in wireshark? SSDP protocol, rather than HTTP?

I used to be able to filter my wireshark packets to get useful information from them. However, with my current configuration on OSX, all of the HTTP traffic is coming through as the SSDP protocol and ...
3
votes
5answers
51k views

Hacking into WiFi using OS X! [closed]

Is there a software that would help me to crack WiFi? I'm not doing anything illegal, we have a bet going on within our organization (I read that WiFi can be hacked). my price is lunch (and i'm ...
1
vote
2answers
13k views

How do I know if my wireless card is capable of packet injection?

I have this wireless card: http://www.edimax.com/en/produce_detail.php?pd_id=8&pl1_id=1&pl2_id=44 and I'm not sure if it supports packet injection. How can I find this out? Running OSX ...
5
votes
5answers
448 views

Looking for a packet builder

Can anyone recommend a quality packet builder? I'm analyzing network traffic (academic purposes) with Wireshark, and I'd like to be able to create packets as well. Open Source is always a bonus. ...
2
votes
3answers
11k views

what's the meaning of TTL=64?

If I'm sniffing my computer and see some packet with TTL=64, does it means that the packet came from a computer inside my network, or it can be anyone in the WWW ? I know what TTL is. But I'm trying ...
1
vote
1answer
1k views

Need a wireless card for packet injection. On OSX

I'll be doing a project for my wireless security course and I need a network card that can inject packets and do packet sniffing for my early 2009 macbook. What is the recommended card for packet ...
7
votes
2answers
3k views

RS232 Packet Sniffer

I'm working on a software development project that requires me to send signals to a device via RS232 port. Sadly the included utilities for transferring to and from the device would not work for mass ...
29
votes
1answer
21k views

Mac Wireshark alternatives [closed]

Do you know any good alternatives for wireshark (network analyzer) running on a Mac OS X 10.5+? Wireshark is not that handy like on an Windows OS (user interface with X11, ...). Any kind of help is ...
2
votes
2answers
1k views

Software to capture the packets in an MPEG Transport Stream

I have a DVB-T capture card and would like to capture the packets from the MPEG stream it receives so i can analyse them just for a bit of fun and learning I've googled and found a lot of converters ...
3
votes
2answers
2k views

Monitor Network Traffic on WPA

I know the password to the network. All I want to do is see what is going on. I don't care if it's encrypted. How do I do this? Help!
2
votes
1answer
2k views

How do I un-gzip data captured by Wireshark?

I have a Wireshark capture file with a HTTP request, however, the request is gzipped. My question is how can I ungzip it so see what data was transfered in cleartext? The capture file is here if ...
5
votes
3answers
7k views

Capture traffic for specific application

I have an application which communicates with some server. I want to know what the IP of this server is. How can I capture all the traffic from a specific application and not just all the traffic like ...
10
votes
3answers
22k views

Is there a nice, graphical, packet sniffer for Mac OSX?

I have Wireshark and have used tcpdump, but I was wondering if there was a nice GUI to capture and view packets on the Mac. Ideally, something that is protocol aware, so that it knows how to break up ...
0
votes
2answers
5k views

Wireshark does not see interfaces (winXP)

Short story: Wireshark is working....on my winXP-32b ... usage .... Long long time later Wireshark does not work It can't find any usefull interface (just VPN) ipconfig /all Ethernet adapter ...
0
votes
5answers
4k views

How can I sniff traffic sent by POST method (on another computer)?

Suppose there is a site which has a form and it send data through POST method over http (NOT HTTPS)? I can access this website directly and also the victim's computer directly. How can i sniff what ...
96
votes
15answers
98k views

Looking for HTTP debugging proxy for Mac similar to Fiddler on Windows [closed]

In previous jobs when I've worked on a Windows machine, I've used Fiddler for viewing HTTP transactions and debugging. I'm specifically looking to monitor the HTTP transactions for an ajax site I'm ...
16
votes
4answers
18k views

How to sniff for wireless MAC addresses in area - My laptop got stolen

A few days ago my apartment got broken in, and they took all the electronics, including my $1500 laptop. We are pretty sure it's an inside job (as in someone from the same building), so I believe ...