Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

0
votes
3answers
1k views

Network Sniffer identifying strange requests to *.crdui.com

So I just downloaded a Network Sniffer on my local machine, as I think something is going on. As soon as I opened it, selected my network adapter (an LTE stick), it started showing me requests from ...
0
votes
1answer
40 views

Setting promiscuous mode in WIFI card

I am on a home network behind a router and I want to capture traffic b/w router and other devices like PCs. All the devices are connected using Wi-Fi with the router. My Wi-Fi driver is ath9k, I ...
0
votes
1answer
31 views

Check if I'm supervised [closed]

Is there any software that I can use to check If my computer is supervised? I want to know if anyone is sniffing my traffic out of my computer with wireshark or another software. Is this possible?
1
vote
1answer
21 views

How to detect TOR usage with Wireshark?

I use TOR inside a Virtual Machine. I run Wireshark on my Host. I want to detect TOR usage (for learning/studying) with Wireshark but don't know how. I've tried this: ...
96
votes
15answers
98k views

Looking for HTTP debugging proxy for Mac similar to Fiddler on Windows [closed]

In previous jobs when I've worked on a Windows machine, I've used Fiddler for viewing HTTP transactions and debugging. I'm specifically looking to monitor the HTTP transactions for an ajax site I'm ...
0
votes
0answers
42 views

Capturing 802.11n HT control on wireshark

1) Using wireshark 1.12.2 with kernel 3.8.0-44-generic I cannot see any HTC+ fields in my packets. Is this a dissector issue in wireshark or related to my wireless nic. I have tried on both an alfa ...
0
votes
3answers
1k views

Connecting PS4 through SonicWall TZ100 firewall | Sony Error NW 31162-3

I am attempting to Connect my PlayStation 4 through my SonicWall TZ100. I have below Ports Forwarded. I'm not great with Packet capturing, but as far as I can tell nothing is getting bounced that is ...
-1
votes
1answer
26 views

Check URL's that used by client of my private WIFI

I have in my home internet with an access point with WIFI. Sometimes I see that my speed is really getting down. is theres a way I can listen to MY OWN network and to see the address that were entered ...
0
votes
1answer
50 views

How to route a Router's wired WAN through my PC's Wireless LAN?

I've got an old Cisco WRT54GS router that I'm wanting to use to create a "experimenting" network. [ I want to packet sniff my 3DS, basically ]. My desktop has a wireless card that I use to connect to ...
1
vote
2answers
97 views

How do capture filters in Wireshark work internally?

I am wondering exactly what happens internally in TShark when I use a capture filter. Specifically, let's say I have the following filter to capture multicast data: host 224.0.26.3 && port ...
-1
votes
1answer
26 views

Modify a packet's content on DD-WRT

I need to modify incoming data to my network. Specifically, I want to modify all responses from a specific internet site so it doesn't show a certain HTML element. Is this possible with ...
1
vote
2answers
68 views

SSL sniff VirtualBox

I'm trying to sniff ssl traffic from a VirtualBox I created (Android). I'm using the build-in pcap system of VirtualBox to sniff regular traffic, but obviously that doesn't work for ssl. What I'm ...
1
vote
1answer
3k views

Sniffing the Router for Packets

I have used WireShark software to sniff my Network Interface. What if i wanted to sniff the router that what other computers on the network are doing? Is there any way to do that? Computers are ...
2
votes
1answer
213 views

Is there a software that allows RS232 sniffing and TCP/UDP listening [closed]

I am looking for a software that would fulfill the following requirements: Able to "sniff" communication over RS232 (like PortMon and Advanced Serial Data Logger) Able to listen to a given ...
0
votes
1answer
46 views

Is it possible to sniff packets on other subnetworks?

I've been reading about packet sniffing and was wondering if it's possible for someone to sniff packets on subnetworks other than the one they're on. Since the point of a subnetwork is that devices ...
0
votes
1answer
83 views

Can't capture inbound/outbound messages in Fiddler

.NET interferes with localhost traffic (there's already a lot of threads open on that topic), but something else is mangling my ability to see traffic to/from my server. I know this because I am ...
3
votes
3answers
12k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
0
votes
0answers
84 views

Sniff non-HTTP packets from iOS device

I have an iOS app, which is really crappy, that work as a remote for my TV. I want to reverse engineer the API and build a web based control instead. I have used the BURP Suite to sniff the HTTP ...
2
votes
0answers
78 views

What might be causing specific IPv6 HTTPS servers to send an excessive number of RST packets?

Client browsers on my IPv6-enabled home network hang and time out when attempting to load https:// URLs from specific IPv6 sites, such as ones operated by CloudFlare. In those situations, the live log ...
0
votes
1answer
26 views

What does this hex value mean in source column within NETMON?

I am using NETMON to try and figure out why my local network is running so slow. I think it may be related to a system logged into it, but in order to not draw attention to my task i have been ...
-1
votes
1answer
79 views

scary adware , all links in websites using google analytics goes to ad page

i had no problem until yesterday but today i noticed when i click any links it redirects me to http://www.ultrafiles.net/7cc02b3a/url/MY-LINK-HERE which looks like this: the picture above i tried ...
1
vote
0answers
49 views

Sniffing Application Network Traffic on Windows

I have an application running on my computer which communicates with a server over Windows-VPN. I would like to sniff the traffic between that app and the server but Wireshark f.x. will only show me ...
4
votes
1answer
2k views

Can you sniff packets of an open wifi network that you are not connected to?

I mean, just see all the packets going though the air.. is this possible with Wireshark, for example?
1
vote
2answers
38 views

Relay/forward captured packtes

Fellow members, Got a small question, How can one relay/forward the packet captured on unix/linux machine to a network device using ftp/tftp/any other mechanism. I've got a wireless network ...
1
vote
0answers
209 views

how to sniff from a TP-Link ADSL modem?

I have a PC and a tablet that connected to a TP-Link ADSL modem. PROBLEM: I want to see the packets that send and receive from my modem not my PC( to see both wire and wireless packets) I search ...
2
votes
5answers
18k views

How do I limit packet capturing in Wireshark to only a specific protocol?

I would like to listen to HTTP traffic on port 8080. When I start capturing packets in Wireshark, it's flooded by packets using the SSDP protocol on port 1900. I would like to limit the packet ...
0
votes
1answer
313 views

Problems using tshark sniffing TLS encrypted traffic with .pem key

I am having problems decrypting TLS encrypted syslog-ng packets in a honeynet using tshark (command line Wireshark). The goal is to be able to intercept the packets going from the honeypots to a ...
0
votes
1answer
30 views

How to view edited page after editing the headers in Fiddler?

I am playing a bit with Fiddler because it seems to be the tool of choice for HTTP analysis on Windows, but I can't for the life of me understand how to view the new page after I have edited a request ...
1
vote
2answers
1k views

Wireshark only capturing beacon frames

I am trying to sniff my own network to capture http traffic. On airodump my network security show "WPA - TKIP - PSK", so I went to Wireshark > Edit > Preferences > Protocols > IEEE 802.11 > Enabled ...
-1
votes
1answer
60 views

How to sniff download information of different pc's on a network(router) [closed]

I am making a Log Analyzer for downloads on a network by different users. So I want to know who downloaded what in the same network (WLAN). How can I sniff this information from other users of the ...
0
votes
1answer
164 views

Intercept HTTPS traffic of a IP energy consumption monitor device

I have this device connected to my home network, and I'm curious about what it's sending to the Internet. It seems to generate a lot of traffic. I've connected it to my laptop and I've shared the ...
1
vote
2answers
119 views

Wireshark filtering for one network

How do i make Wireshark filter results so it just shows results from one wifi net work. I have had a look on Google but found nothing. Can any one help.
0
votes
0answers
46 views

How to capture HTTP headers to particular url in my Ubuntu computer?

I am connecting a website and can see the hearders by firefox inspect tool. I like to do it from outside of the browser for particular url acceses. How can I do it in my Ubuntu computer?
0
votes
0answers
100 views

Can't catch packet using jpcap

To sniff the hidden URL of videos, I use Jsoup to connect the page and use Jpcap to catch the packets from the hidden server, but what Jpcap catches is null.Here is the code: Receiver.java public ...
0
votes
0answers
19 views

Hidden network interfaces

I'm trying to list all network interfaces in a linux server (network sniffer). When I use the command tcpdump -D is shows only the managing ports and lo. Are the other ports hidden some way? Is there ...
1
vote
1answer
61 views

Looking for a tool to inspect HTTP data between a mobile phone and AV receiver

I am trying to dissect the protocol used by my AV receiver and its mobile app on my phone. Basically, I'd like to see all the GET/POST requests from the app on the phone and the responses from the ...
1
vote
2answers
775 views

how to find tcp streams without final ack/fin sequence in a huge packet capture file

I have a huge pcap file which contains a large number of individual tcp streams.But out of these , there are some invalid streams which dont have the final fin/ack sequence. Is there any way i can ...
2
votes
3answers
11k views

what's the meaning of TTL=64?

If I'm sniffing my computer and see some packet with TTL=64, does it means that the packet came from a computer inside my network, or it can be anyone in the WWW ? I know what TTL is. But I'm trying ...
2
votes
2answers
387 views

How to I capture HTTP header traffic in my home network

I'm trying to experiment with some HTTP data for a personal project. What I would like to do is capture all the HTTP traffic that passes through my Wifi Router at home and use that data for some ...
7
votes
3answers
10k views

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V ...
5
votes
1answer
21k views

Capturing wireless traffic (using Wireshark)

When I run wireshark on a wired network it works fine and reports all of the packets. When I run it on a wireless network though I only see my own traffic. The wireless card I have is supposed to ...
0
votes
1answer
89 views

WiFi connection lags from time to time

My home LAN connection lags from time to time (approx once a minute). This is noticeable by temporary pauses of continuos operations like file copying, RDP working and video playback with small ...
0
votes
0answers
17 views

How to keep socket visible after closing the connection?

Is it possible to configure Linux to keep a tcp connection visible for netstat/lsof after being closed? (doesn't matter the connection state). I need to detect it with netstat/lsof but if the ...
2
votes
2answers
14k views

What is the best way to monitor and record the URLs called by device to establish or monitor browsing history?

I have home internet access via Comcast/Xfinity and the router below providing wifi to multiple devices - laptops, iPads, iPhones, iPod Touch. Macs. What is the best way to monitor and record the ...
2
votes
6answers
570 views

On a switched network, why do unicast packets not addressed to me reach my NIC when I'm in promiscuous mode?

When I'm connected to a switch, the switch knows which MAC address belongs to which port. So even when I'm in promiscuous mode, why do I receive unicast packets that are addressed to other MAC ...
0
votes
2answers
201 views

How many bytes of a WLAN packet do I have to examine to extract MAC addresses?

How many bytes of a 802.11 (WLAN) packet do I have to examine to be able to extract source, destination, receiver and transmitter adress from the header? This image suggests the header length of a ...
34
votes
5answers
3k views

What stops an internet router from sniffing my traffic?

Packets travel through internetworks, and take many routes through internet routers. On each route that forwards traffic to another until reaching the ultimate destination, what stops them from ...
1
vote
2answers
196 views

How to view other lan users packets via wireshark

It seems that I can only view my own packets, how to view other lan users packets via wireshark?
1
vote
2answers
529 views

Why can't nc / netcat sniff http port traffic easily?

I'm NOT looking for advice such as "try wireshark." I'm trying to understand what netcat is and isn't. When I try to listen (-l) to port 80, it says "address already in use." Can netcat not listen to ...
0
votes
1answer
27 views

Is there a way to limit number of packet captures with tcpflow?

I want to limit the number of captured packets, such as: tcpdump -c 20 I want to use tcpflow instead. Is this possible? The console throws a syntax error using tcpflow with the -c parameter. edit - ...