Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

1
vote
0answers
465 views

How to get data from sniffed usb communication?

we are trying to get raw measurement data from one usb sensor as the control software is a black box and the manual does not contain anything about how it process the measurements. I was able to ...
0
votes
1answer
525 views

HDI: Capture specific content types in wireshark?

I've been tasked to audit in/outbound traffic at our site, but I don't know much about Wireshark. I understand how to set up a capture filter for broad protocols (IP only or tcp, udp, icmp, etc), but ...
2
votes
1answer
3k views

What speed are Wi-Fi management and control frames sent at?

There are a bunch of different 802.11 Wi-Fi standards, e.g. 802.11a, 802.11b, 802.11g, 802.11n etc. that all support different speeds. Wi-Fi frames are generally categorised as one of the following: ...
2
votes
2answers
31k views

What is the best way to monitor and record the URLs called by device to establish or monitor browsing history?

I have home internet access via Comcast/Xfinity and the router below providing wifi to multiple devices - laptops, iPads, iPhones, iPod Touch. Macs. What is the best way to monitor and record the ...
-1
votes
1answer
66 views

Is there a way I can check what information a piece of software is sending out [duplicate]

Possible Duplicate: How can I sniff traffic sent by POST method (on another computer)? I need to streamline a process for a client. Currently he has some a bit of software which extracts ...
1
vote
0answers
136 views

Sniffing content of web pages in a network - experiment

I want to sniff the web content. Don't worry, no vicious intentions, it is an experiment : ) So the scenario is: I have my host machine, and multiple guest virtual machines running on it. All VMs go ...
1
vote
2answers
2k views

Do machines connected to the same switch belong to the same subnet?

When we talk about a subnet - do we mean all the systems connected to the same switch? If I have an assigned IP address of 10.0.2.1, am I in the same subnet as that of 10.0.1.39? When we talk about ...
1
vote
4answers
204 views

if an outdated, vulnerable but clean Windows machine is connected to network behind router, can it be detected and attacked?

suppose the machine is clean of all malware but not in any sense updated, patched, secured etc. Suppose I connect it to the internet from behind wireless router with the intent of using it only on a ...
0
votes
1answer
138 views

How dropbox knows about my corporate email?

I'm dropbox user. Today I received some promotional email from them and not to my regular email account but on my corporate-one. I NEVER entered that email address in any of the forms while signing up ...
1
vote
2answers
2k views

how to find tcp streams without final ack/fin sequence in a huge packet capture file

I have a huge pcap file which contains a large number of individual tcp streams.But out of these , there are some invalid streams which dont have the final fin/ack sequence. Is there any way i can ...
2
votes
5answers
24k views

How do I limit packet capturing in Wireshark to only a specific protocol?

I would like to listen to HTTP traffic on port 8080. When I start capturing packets in Wireshark, it's flooded by packets using the SSDP protocol on port 1900. I would like to limit the packet ...
1
vote
1answer
1k views

decrypt local ssl traffic (MacOS)

I am trying to reverse engineer a protocol which uses HTTPS exclusively. On Windows I was using oSpy to view the plaintext of local SSL packets, but for MacOS I have not been able to find an ...
2
votes
2answers
169 views

Intercepting web traffic locally

I am currently the victim of some kind of virus. I noticed this when I visited the Barclays site and was presented with some unusual questions about my details that just didn't seem right. After some ...
3
votes
2answers
9k views

Replay UDP Packet Capture

I have a UDP packet capture which was streamed from Port1 on IP1 to Port2 on IP2 on network N1. I need to replay these packets on another network N2 from Port3 on IP3 to Port4 on IP4. I need to know ...
3
votes
2answers
141 views

How does HTTPS avoids the key for encryption to be sniffed in the first place?

When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right? So, to do that, at some point the key have to travel unencrypted from one computer to ...
1
vote
1answer
885 views

Filtering sniffed logs using Wireshark

I'm experimenting with packet sniffing and log examination using Wireshark, and I'm quickly realizing that I'm not nearly as safe as I should be when using public hot spots. In efforts to better ...
6
votes
4answers
7k views

Get active network interface on Windows

I'm developing an application that provides a UI to windump, the packet sniffer. Windump has a "-D" parameter that lists all network interfaces it can find, and then you can specify which interface to ...
1
vote
1answer
91 views

Quick and easy setup for Packet Sniffing/Network Collection

I'm doing some research right now where I want to monitor a group of individuals uses of the web (with permission, of course). I'm looking for the cheapest, and easiest way to collect network ...
0
votes
1answer
2k views

Wireshark sniffing “microsoft-ds [syn] seq=0..”

I'm new to wireshark. (installed it today) I'm just looking at the traffic and noticed this kind of packages: 60261 microsoft-ds [syn] seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1 its sent to ip: ...
2
votes
6answers
924 views

On a switched network, why do unicast packets not addressed to me reach my NIC when I'm in promiscuous mode?

When I'm connected to a switch, the switch knows which MAC address belongs to which port. So even when I'm in promiscuous mode, why do I receive unicast packets that are addressed to other MAC ...
2
votes
1answer
307 views

Is there a software that allows RS232 sniffing and TCP/UDP listening [closed]

I am looking for a software that would fulfill the following requirements: Able to "sniff" communication over RS232 (like PortMon and Advanced Serial Data Logger) Able to listen to a given ...
5
votes
1answer
4k views

How can I use Teamviewer anonymously with TOR network?

I would like to be able to use Teamviewer anonymously to avoid revealing my real IP address while I access sensitive data on my remote server. The data being transferred is encrypted. I have looked ...
2
votes
2answers
468 views

Packet sniffer for router in windows

Is there a packet analyzer for windows for analyzing packets that passes through the router?
1
vote
1answer
817 views

Sniff my own Packets (non-Administrator)

Running in Windows (Windows 7), I'm trying to sniff my browser's requests. I can install tools that sniff packets for all users, and require high permissions. But, I would like to just run a tool to ...
0
votes
1answer
11k views

How to set CommView to capture a specific wifi instead of the whole channel?

I am trying to experiment with CommView for Wifi. When I start searching for devices their are separated in channels. I click on the one I want and then Capture. As I see the program is capturing the ...
-3
votes
1answer
2k views

Http analyzer free alternative? [closed]

Are there any free alternatives for this app ?? http://www.ieinspector.com/httpanalyzer/ It's great, it monitors all open http requests and downloaded size. Any suggestions please ??
1
vote
1answer
128 views

What should I consider when shopping for a private VPN?

I frequently rely on public wireless connections when I'm on the road, so to minimize the risk of session hijacking and packet sniffers I would like to start routing all of my connections through a ...
4
votes
2answers
5k views

Can anyone read (sniff) my Google Talk messages?

When I use Google Talk over https://gmail.com can anyone read (sniff) my messages?
1
vote
1answer
105 views

When connected to a secure WiFi network, is your traffic safe from others on the same network?

If two users are on the same secure WiFi network, is there a way to sniff the traffic like you might on an unsecure network?
4
votes
2answers
1k views

Unable to capture outgoing traffic with Wireshark on wi-fi network

I'm trying to use Wireshark on Backtrack 5 to capture packets that are transmitted through my home wi-fi network. I'm perfectly able to capture outgoing traffic from localhost and, it seems, incoming ...
3
votes
1answer
4k views

Sniff process communication on Windows 7

I have two local processes which communicate to let the other execute commands. And I want to know what they are talking about. After some first investigation, it's not over Sockets or Loopback, but ...
1
vote
0answers
451 views

SocketSniff equivalent for 64-bit applications

SocketSniff allows you to watch the Windows Sockets (WinSock) activity of the selected process. On x64 version of Windows, SocketSniff can only work with 32-bit programs. Is there any SocketSniff ...
1
vote
1answer
229 views

Looking for tool to show IP packets (and do analysis) sent/received from/to my machine (want to debug why can't mount network drive)

fiddler2 comes close but this only deals with web browsers it seems. I need this tool to debug why I can't mount a common standard network/NAS drive (e.g. via SMB/SAMBA) in Windows 7 Pro and Home. ...
4
votes
2answers
8k views

How to make tcpdump (or other tool) to actually dump TCP stream?

I expect something like this: $ nc example.com 80 GET / HTTP/1.0 HTTP/1.0 500 K.O. Content-Type: application/null Content-Length: -1 $ Meanwhile: # tcpdump -i eth0 --actually-dump-all-tcp ...
7
votes
3answers
4k views

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! ...
7
votes
2answers
1k views

On an unencrypted public wi-fi hotspot, what exactly is a packet sniffer doing to get another computer's packet?

I get mixed results when reading information security articles, some of them stating that in order to do something similar you need to also setup some sort of honeypot with a running access point and ...
1
vote
2answers
1k views

Networking packet sniffer for Linux that captures the application names?

I tried Wireshark. It shows the source and destination IP address, port number, and packet contents, but nothing about which application is using the packets. Apparently tcpdump is similar; network ...
5
votes
1answer
1k views

Is there a popular application for Windows 7 to find nearby WiFi networks?

I was wondering if we can use a third party program, besides "Network and Sharing Center," to find WiFi networks. Is there a popular and recommended application for Windows 7 that finds WiFi ...
4
votes
1answer
3k views

Can you sniff packets of an open wifi network that you are not connected to?

I mean, just see all the packets going though the air.. is this possible with Wireshark, for example?
7
votes
1answer
12k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
1
vote
1answer
858 views

WinPcap installation error

When installing WinPcap 4.1.2 (as well as earlier versions) I get the following error: An error occurred while loading the WinPcap Install Helper DLL I checked the WinPcap FAQ but there was ...
1
vote
1answer
314 views

Suspicious redirection to russian pages. Is government spying us?

Recently when I browse some multi-language websites the default language for them is Russian. An example is www.amd.com which redirects me to the russian page ...
0
votes
3answers
466 views

Is it possible to impersonate another WAP by intercepting communication with other client?

There is a well known WAP that lots of people use. Someone comes in with a laptop equipped with a sniffer. The laptop sniffs people trying to log on to the WAP. It intercepts the connection, and when ...
3
votes
4answers
758 views

Packet sniffing and my passwords

I am designing a website and have been learning about POST and GET requests and how POST requests can be read through 'packet sniffing'. Further reading seems to suggest that the data flowing to and ...
0
votes
1answer
2k views

tcpdump not showing all packets? [duplicate]

Possible Duplicate: my tcpdump always filters packets? I've been using tcpdump for about a month now, and recently, it has stopped capturing any packets that were not sent to or from the ...
1
vote
1answer
2k views

tcpdump missing on Cygwin v1.7.7 for packet sniffing

I am trying to debug why my TCP packets are truncated. I see that only the first 24 bytes of each packet are showing up in my program. The 25th through 28th bytes are scrambled and all others after ...
0
votes
2answers
343 views

How to monitor / sniff localhost SVN protocol messages

We have a local SVN client and server on localhost I would like to "sniff" all SVN protocol messages sent to the SVN server How can that be done?
2
votes
1answer
153 views

TCP source and destination ports switch

Why do i see source and destination ports switching with each other in a packet capturing application?
0
votes
1answer
2k views

Logging HTTP traffic on Linux

A bit of a backstory, my brother (in his early teens) has an attention disorder. Often I find him when he is supposed to be doing his homework instead surfing the web. We would ideally like to ...
1
vote
2answers
647 views

How to debug Wifi?

I have Linux soft-ap running hostapd. I want to collect (from air) list of all packets going to this ap from certain address, or, rather, excluding certain MACs since only one master-managed link ...