Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

7
votes
1answer
9k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
1
vote
1answer
763 views

WinPcap installation error

When installing WinPcap 4.1.2 (as well as earlier versions) I get the following error: An error occurred while loading the WinPcap Install Helper DLL I checked the WinPcap FAQ but there was ...
0
votes
0answers
5k views

How do I make tcpdump to write to file for each packet it captures?

I'm running the following version of tcpdump: tcpdump version 4.0.0 libpcap version 1.0.0 I want to make tcpdump write to a file for each packet it captures. Currently, I could only see the ...
1
vote
1answer
286 views

Suspicious redirection to russian pages. Is government spying us?

Recently when I browse some multi-language websites the default language for them is Russian. An example is www.amd.com which redirects me to the russian page ...
0
votes
3answers
242 views

Is it possible to impersonate another WAP by intercepting communication with other client?

There is a well known WAP that lots of people use. Someone comes in with a laptop equipped with a sniffer. The laptop sniffs people trying to log on to the WAP. It intercepts the connection, and when ...
2
votes
4answers
662 views

Packet sniffing and my passwords

I am designing a website and have been learning about POST and GET requests and how POST requests can be read through 'packet sniffing'. Further reading seems to suggest that the data flowing to and ...
0
votes
1answer
1k views

tcpdump not showing all packets? [duplicate]

Possible Duplicate: my tcpdump always filters packets? I've been using tcpdump for about a month now, and recently, it has stopped capturing any packets that were not sent to or from the ...
0
votes
1answer
1k views

tcpdump missing on Cygwin v1.7.7 for packet sniffing

I am trying to debug why my TCP packets are truncated. I see that only the first 24 bytes of each packet are showing up in my program. The 25th through 28th bytes are scrambled and all others after ...
0
votes
2answers
309 views

How to monitor / sniff localhost SVN protocol messages

We have a local SVN client and server on localhost I would like to "sniff" all SVN protocol messages sent to the SVN server How can that be done?
1
vote
1answer
135 views

TCP source and destination ports switch

Why do i see source and destination ports switching with each other in a packet capturing application?
0
votes
1answer
2k views

Logging HTTP traffic on Linux

A bit of a backstory, my brother (in his early teens) has an attention disorder. Often I find him when he is supposed to be doing his homework instead surfing the web. We would ideally like to ...
1
vote
2answers
536 views

How to debug Wifi?

I have Linux soft-ap running hostapd. I want to collect (from air) list of all packets going to this ap from certain address, or, rather, excluding certain MACs since only one master-managed link ...
2
votes
1answer
368 views

Forwarding wifi traffic to wired pc

I'm trying to play around with Wireshark on my home network, and was wondering if there is a way to create a new connection on my PC that receives all wifi packets on the network. The PC is a wired ...
1
vote
2answers
494 views

Utility/Sniffer to track internet traffic/speed of all PCs in local network

It doesn't matter if utility is for Ubuntu or for Windows XP/7, just need to see what pc is using the most traffic in local network. Probably some spammer etc on that pc. Need to get rid of that, ...
2
votes
3answers
11k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
3
votes
1answer
133 views

Interactive network sniffing

I'm looking for what essentially amounts to an "interactive" Wireshark. I am looking for a tool that allows me to view network traffic on a given port and allow/deny/modify traffic on a per-packet ...
0
votes
1answer
621 views

Network packet editor for Linux?

Anyone know network packet editor for Linux, or a way to modify network packets in wireshark?
2
votes
1answer
801 views

Is there a way to sniff packets encrypted with WPA(2)?

I was reading about the recent FireSheep tool. People are saying that it is fine to sniff WPA/2 PSK networks because if you have the PSK, you can decrypt anyone's traffic. I am wondering if there are ...
2
votes
4answers
2k views

In Windows OS, some background process consuming 75 MB Network data ( BroadBand wastage) everyday. How can I find that background process?

I am using limited BroadBand ( I can use up to 3GB per month). BroadBand company charges extra money if I use beyond 3 GB. Everyday one ( or more) background process utilizing 75 MB of Internet ...
4
votes
3answers
7k views

Packet Sniff over Wi-Fi

I've got a non-PC wireless client, and I'm wondering about some of its connections. I want to see the actual packets being exchanged from the net to my device over a Wi-Fi connection. I have ...
7
votes
3answers
8k views

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V ...
1
vote
2answers
81 views

How to find where an application is storing data?

I have been using this program for a long time http://userweb.cs.utexas.edu/users/tbone/stickynotes.html I installed it on a new system and I need to find where it saves information so I can restore ...
5
votes
1answer
19k views

Capturing wireless traffic (using Wireshark)

When I run wireshark on a wired network it works fine and reports all of the packets. When I run it on a wireless network though I only see my own traffic. The wireless card I have is supposed to ...
2
votes
1answer
69 views

Is there a good tool that lets me sniff the network calls?

My objective: Itunes talks to their cloud servers. I want to be able to know which URL they are talking to when I use my Itunes. How can I do that?
0
votes
3answers
238 views

How do I view the location of an swf file that is obfuscated somehow

Specifically, I'm trying to view Elmo's Keyboard-o-rama fullscreen. The original swf file has been moved and obscured. For a toddler, this game really needs to be full screen! The toddler doesn't ...
2
votes
2answers
5k views

Usefulness of packets in wireshark? SSDP protocol, rather than HTTP?

I used to be able to filter my wireshark packets to get useful information from them. However, with my current configuration on OSX, all of the HTTP traffic is coming through as the SSDP protocol and ...
3
votes
5answers
46k views

Hacking into WiFi using OS X! [closed]

Is there a software that would help me to crack WiFi? I'm not doing anything illegal, we have a bet going on within our organization (I read that WiFi can be hacked). my price is lunch (and i'm ...
1
vote
2answers
13k views

How do I know if my wireless card is capable of packet injection?

I have this wireless card: http://www.edimax.com/en/produce_detail.php?pd_id=8&pl1_id=1&pl2_id=44 and I'm not sure if it supports packet injection. How can I find this out? Running OSX ...
5
votes
5answers
412 views

Looking for a packet builder

Can anyone recommend a quality packet builder? I'm analyzing network traffic (academic purposes) with Wireshark, and I'd like to be able to create packets as well. Open Source is always a bonus. ...
2
votes
3answers
9k views

what's the meaning of TTL=64?

If I'm sniffing my computer and see some packet with TTL=64, does it means that the packet came from a computer inside my network, or it can be anyone in the WWW ? I know what TTL is. But I'm trying ...
1
vote
1answer
1k views

Need a wireless card for packet injection. On OSX

I'll be doing a project for my wireless security course and I need a network card that can inject packets and do packet sniffing for my early 2009 macbook. What is the recommended card for packet ...
7
votes
2answers
2k views

RS232 Packet Sniffer

I'm working on a software development project that requires me to send signals to a device via RS232 port. Sadly the included utilities for transferring to and from the device would not work for mass ...
27
votes
1answer
18k views

Mac Wireshark alternatives [closed]

Do you know any good alternatives for wireshark (network analyzer) running on a Mac OS X 10.5+? Wireshark is not that handy like on an Windows OS (user interface with X11, ...). Any kind of help is ...
2
votes
2answers
849 views

Software to capture the packets in an MPEG Transport Stream

I have a DVB-T capture card and would like to capture the packets from the MPEG stream it receives so i can analyse them just for a bit of fun and learning I've googled and found a lot of converters ...
3
votes
2answers
2k views

Monitor Network Traffic on WPA

I know the password to the network. All I want to do is see what is going on. I don't care if it's encrypted. How do I do this? Help!
2
votes
1answer
2k views

How do I un-gzip data captured by Wireshark?

I have a Wireshark capture file with a HTTP request, however, the request is gzipped. My question is how can I ungzip it so see what data was transfered in cleartext? The capture file is here if ...
5
votes
3answers
6k views

Capture traffic for specific application

I have an application which communicates with some server. I want to know what the IP of this server is. How can I capture all the traffic from a specific application and not just all the traffic like ...
10
votes
3answers
19k views

Is there a nice, graphical, packet sniffer for Mac OSX?

I have Wireshark and have used tcpdump, but I was wondering if there was a nice GUI to capture and view packets on the Mac. Ideally, something that is protocol aware, so that it knows how to break up ...
0
votes
2answers
5k views

Wireshark does not see interfaces (winXP)

Short story: Wireshark is working....on my winXP-32b ... usage .... Long long time later Wireshark does not work It can't find any usefull interface (just VPN) ipconfig /all Ethernet adapter ...
0
votes
5answers
4k views

How can I sniff traffic sent by POST method (on another computer)?

Suppose there is a site which has a form and it send data through POST method over http (NOT HTTPS)? I can access this website directly and also the victim's computer directly. How can i sniff what ...
88
votes
15answers
86k views

Looking for HTTP debugging proxy for Mac similar to Fiddler on Windows [closed]

In previous jobs when I've worked on a Windows machine, I've used Fiddler for viewing HTTP transactions and debugging. I'm specifically looking to monitor the HTTP transactions for an ajax site I'm ...
14
votes
4answers
16k views

How to sniff for wireless MAC addresses in area - My laptop got stolen

A few days ago my apartment got broken in, and they took all the electronics, including my $1500 laptop. We are pretty sure it's an inside job (as in someone from the same building), so I believe ...
4
votes
5answers
215 views

What is the best program to know what applications are doing with online connections? [closed]

Does anyone know a small tool that you install which simply informs you of what information applications are sending with their online connections, e.g. so if you are installing photoshop elements ...
8
votes
4answers
7k views

Windows tool to find out which port an app is trying to use?

I am guessing that netstat shows apps and their ports that already have a connection and it doesn't show or can't show an app that is trying to open a connection. If I have an app that's trying to ...
2
votes
4answers
1k views

Software to view all HTTP connections made by your computer? [closed]

I would like to see all HTTP connections (with free and preferably open source software), and their full responses made by my computer. A performance hit doesn't matter, as I will use this only in ...
0
votes
1answer
72 views

HTTPDebuggerPro doesn't save response contents

I'm using HTTPDebuggerPro on Win 7 x64 and the problem is, it doesn't save response contents for some of the response bodies. Is there a way to fix it? I've tried Charles... it's so lame, you need to ...
0
votes
2answers
5k views

How can I sniff packets from an unsecured wireless network?

I am interested in being able log packets going over a unsecured wireless network. Specifically, I want to see HTTP POST / GET requests and responses going between the router and computers on the ...
2
votes
3answers
1k views

Can I do packet sniffing out of the box on OS X?

I'm doing some development, a Java app that communicates via HTTP. The log4j isn't helping me much so I'd like to see the actual HTTP Request that I am creating once it gets sent out. I know that in ...
2
votes
2answers
547 views

How do I create a wireless linux router from a spare server?

I'm going to be doing some experiments with network traffic sniffing and I would like to setup a linux box as my home router. Are there any really easy ways to do this and have a web-configurable ...