Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

2
votes
5answers
22k views

How do I limit packet capturing in Wireshark to only a specific protocol?

I would like to listen to HTTP traffic on port 8080. When I start capturing packets in Wireshark, it's flooded by packets using the SSDP protocol on port 1900. I would like to limit the packet ...
1
vote
1answer
1k views

decrypt local ssl traffic (MacOS)

I am trying to reverse engineer a protocol which uses HTTPS exclusively. On Windows I was using oSpy to view the plaintext of local SSL packets, but for MacOS I have not been able to find an ...
2
votes
2answers
162 views

Intercepting web traffic locally

I am currently the victim of some kind of virus. I noticed this when I visited the Barclays site and was presented with some unusual questions about my details that just didn't seem right. After some ...
2
votes
2answers
7k views

Replay UDP Packet Capture

I have a UDP packet capture which was streamed from Port1 on IP1 to Port2 on IP2 on network N1. I need to replay these packets on another network N2 from Port3 on IP3 to Port4 on IP4. I need to know ...
3
votes
2answers
139 views

How does HTTPS avoids the key for encryption to be sniffed in the first place?

When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right? So, to do that, at some point the key have to travel unencrypted from one computer to ...
1
vote
1answer
844 views

Filtering sniffed logs using Wireshark

I'm experimenting with packet sniffing and log examination using Wireshark, and I'm quickly realizing that I'm not nearly as safe as I should be when using public hot spots. In efforts to better ...
6
votes
4answers
6k views

Get active network interface on Windows

I'm developing an application that provides a UI to windump, the packet sniffer. Windump has a "-D" parameter that lists all network interfaces it can find, and then you can specify which interface to ...
1
vote
1answer
90 views

Quick and easy setup for Packet Sniffing/Network Collection

I'm doing some research right now where I want to monitor a group of individuals uses of the web (with permission, of course). I'm looking for the cheapest, and easiest way to collect network ...
0
votes
1answer
2k views

Wireshark sniffing “microsoft-ds [syn] seq=0..”

I'm new to wireshark. (installed it today) I'm just looking at the traffic and noticed this kind of packages: 60261 microsoft-ds [syn] seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1 its sent to ip: ...
2
votes
6answers
766 views

On a switched network, why do unicast packets not addressed to me reach my NIC when I'm in promiscuous mode?

When I'm connected to a switch, the switch knows which MAC address belongs to which port. So even when I'm in promiscuous mode, why do I receive unicast packets that are addressed to other MAC ...
2
votes
1answer
276 views

Is there a software that allows RS232 sniffing and TCP/UDP listening [closed]

I am looking for a software that would fulfill the following requirements: Able to "sniff" communication over RS232 (like PortMon and Advanced Serial Data Logger) Able to listen to a given ...
5
votes
1answer
3k views

How can I use Teamviewer anonymously with TOR network?

I would like to be able to use Teamviewer anonymously to avoid revealing my real IP address while I access sensitive data on my remote server. The data being transferred is encrypted. I have looked ...
2
votes
2answers
449 views

Packet sniffer for router in windows

Is there a packet analyzer for windows for analyzing packets that passes through the router?
1
vote
1answer
735 views

Sniff my own Packets (non-Administrator)

Running in Windows (Windows 7), I'm trying to sniff my browser's requests. I can install tools that sniff packets for all users, and require high permissions. But, I would like to just run a tool to ...
0
votes
1answer
10k views

How to set CommView to capture a specific wifi instead of the whole channel?

I am trying to experiment with CommView for Wifi. When I start searching for devices their are separated in channels. I click on the one I want and then Capture. As I see the program is capturing the ...
-2
votes
1answer
2k views

Http analyzer free alternative? [closed]

Are there any free alternatives for this app ?? http://www.ieinspector.com/httpanalyzer/ It's great, it monitors all open http requests and downloaded size. Any suggestions please ??
1
vote
1answer
126 views

What should I consider when shopping for a private VPN?

I frequently rely on public wireless connections when I'm on the road, so to minimize the risk of session hijacking and packet sniffers I would like to start routing all of my connections through a ...
4
votes
2answers
4k views

Can anyone read (sniff) my Google Talk messages?

When I use Google Talk over https://gmail.com can anyone read (sniff) my messages?
1
vote
1answer
102 views

When connected to a secure WiFi network, is your traffic safe from others on the same network?

If two users are on the same secure WiFi network, is there a way to sniff the traffic like you might on an unsecure network?
4
votes
2answers
1k views

Unable to capture outgoing traffic with Wireshark on wi-fi network

I'm trying to use Wireshark on Backtrack 5 to capture packets that are transmitted through my home wi-fi network. I'm perfectly able to capture outgoing traffic from localhost and, it seems, incoming ...
3
votes
1answer
3k views

Sniff process communication on Windows 7

I have two local processes which communicate to let the other execute commands. And I want to know what they are talking about. After some first investigation, it's not over Sockets or Loopback, but ...
1
vote
0answers
398 views

SocketSniff equivalent for 64-bit applications

SocketSniff allows you to watch the Windows Sockets (WinSock) activity of the selected process. On x64 version of Windows, SocketSniff can only work with 32-bit programs. Is there any SocketSniff ...
1
vote
1answer
223 views

Looking for tool to show IP packets (and do analysis) sent/received from/to my machine (want to debug why can't mount network drive)

fiddler2 comes close but this only deals with web browsers it seems. I need this tool to debug why I can't mount a common standard network/NAS drive (e.g. via SMB/SAMBA) in Windows 7 Pro and Home. ...
4
votes
2answers
7k views

How to make tcpdump (or other tool) to actually dump TCP stream?

I expect something like this: $ nc example.com 80 GET / HTTP/1.0 HTTP/1.0 500 K.O. Content-Type: application/null Content-Length: -1 $ Meanwhile: # tcpdump -i eth0 --actually-dump-all-tcp ...
7
votes
3answers
3k views

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! ...
7
votes
2answers
1k views

On an unencrypted public wi-fi hotspot, what exactly is a packet sniffer doing to get another computer's packet?

I get mixed results when reading information security articles, some of them stating that in order to do something similar you need to also setup some sort of honeypot with a running access point and ...
1
vote
2answers
1k views

Networking packet sniffer for Linux that captures the application names?

I tried Wireshark. It shows the source and destination IP address, port number, and packet contents, but nothing about which application is using the packets. Apparently tcpdump is similar; network ...
5
votes
1answer
1k views

Is there a popular application for Windows 7 to find nearby WiFi networks?

I was wondering if we can use a third party program, besides "Network and Sharing Center," to find WiFi networks. Is there a popular and recommended application for Windows 7 that finds WiFi ...
4
votes
1answer
2k views

Can you sniff packets of an open wifi network that you are not connected to?

I mean, just see all the packets going though the air.. is this possible with Wireshark, for example?
7
votes
1answer
11k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
1
vote
1answer
841 views

WinPcap installation error

When installing WinPcap 4.1.2 (as well as earlier versions) I get the following error: An error occurred while loading the WinPcap Install Helper DLL I checked the WinPcap FAQ but there was ...
1
vote
1answer
308 views

Suspicious redirection to russian pages. Is government spying us?

Recently when I browse some multi-language websites the default language for them is Russian. An example is www.amd.com which redirects me to the russian page ...
0
votes
3answers
398 views

Is it possible to impersonate another WAP by intercepting communication with other client?

There is a well known WAP that lots of people use. Someone comes in with a laptop equipped with a sniffer. The laptop sniffs people trying to log on to the WAP. It intercepts the connection, and when ...
3
votes
4answers
733 views

Packet sniffing and my passwords

I am designing a website and have been learning about POST and GET requests and how POST requests can be read through 'packet sniffing'. Further reading seems to suggest that the data flowing to and ...
0
votes
1answer
2k views

tcpdump not showing all packets? [duplicate]

Possible Duplicate: my tcpdump always filters packets? I've been using tcpdump for about a month now, and recently, it has stopped capturing any packets that were not sent to or from the ...
1
vote
1answer
1k views

tcpdump missing on Cygwin v1.7.7 for packet sniffing

I am trying to debug why my TCP packets are truncated. I see that only the first 24 bytes of each packet are showing up in my program. The 25th through 28th bytes are scrambled and all others after ...
0
votes
2answers
336 views

How to monitor / sniff localhost SVN protocol messages

We have a local SVN client and server on localhost I would like to "sniff" all SVN protocol messages sent to the SVN server How can that be done?
1
vote
1answer
146 views

TCP source and destination ports switch

Why do i see source and destination ports switching with each other in a packet capturing application?
0
votes
1answer
2k views

Logging HTTP traffic on Linux

A bit of a backstory, my brother (in his early teens) has an attention disorder. Often I find him when he is supposed to be doing his homework instead surfing the web. We would ideally like to ...
1
vote
2answers
623 views

How to debug Wifi?

I have Linux soft-ap running hostapd. I want to collect (from air) list of all packets going to this ap from certain address, or, rather, excluding certain MACs since only one master-managed link ...
2
votes
1answer
411 views

Forwarding wifi traffic to wired pc

I'm trying to play around with Wireshark on my home network, and was wondering if there is a way to create a new connection on my PC that receives all wifi packets on the network. The PC is a wired ...
1
vote
2answers
529 views

Utility/Sniffer to track internet traffic/speed of all PCs in local network

It doesn't matter if utility is for Ubuntu or for Windows XP/7, just need to see what pc is using the most traffic in local network. Probably some spammer etc on that pc. Need to get rid of that, ...
5
votes
4answers
13k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
3
votes
1answer
145 views

Interactive network sniffing

I'm looking for what essentially amounts to an "interactive" Wireshark. I am looking for a tool that allows me to view network traffic on a given port and allow/deny/modify traffic on a per-packet ...
0
votes
1answer
758 views

Network packet editor for Linux?

Anyone know network packet editor for Linux, or a way to modify network packets in wireshark?
2
votes
1answer
902 views

Is there a way to sniff packets encrypted with WPA(2)?

I was reading about the recent FireSheep tool. People are saying that it is fine to sniff WPA/2 PSK networks because if you have the PSK, you can decrypt anyone's traffic. I am wondering if there are ...
2
votes
4answers
2k views

In Windows OS, some background process consuming 75 MB Network data ( BroadBand wastage) everyday. How can I find that background process?

I am using limited BroadBand ( I can use up to 3GB per month). BroadBand company charges extra money if I use beyond 3 GB. Everyday one ( or more) background process utilizing 75 MB of Internet ...
4
votes
3answers
8k views

Packet Sniff over Wi-Fi

I've got a non-PC wireless client, and I'm wondering about some of its connections. I want to see the actual packets being exchanged from the net to my device over a Wi-Fi connection. I have ...
8
votes
3answers
12k views

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V ...
1
vote
2answers
88 views

How to find where an application is storing data?

I have been using this program for a long time http://userweb.cs.utexas.edu/users/tbone/stickynotes.html I installed it on a new system and I need to find where it saves information so I can restore ...