Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

learn more… | top users | synonyms (3)

92
votes
15answers
89k views

Looking for HTTP debugging proxy for Mac similar to Fiddler on Windows [closed]

In previous jobs when I've worked on a Windows machine, I've used Fiddler for viewing HTTP transactions and debugging. I'm specifically looking to monitor the HTTP transactions for an ajax site I'm ...
34
votes
5answers
2k views

What stops an internet router from sniffing my traffic?

Packets travel through internetworks, and take many routes through internet routers. On each route that forwards traffic to another until reaching the ultimate destination, what stops them from ...
28
votes
1answer
18k views

Mac Wireshark alternatives [closed]

Do you know any good alternatives for wireshark (network analyzer) running on a Mac OS X 10.5+? Wireshark is not that handy like on an Windows OS (user interface with X11, ...). Any kind of help is ...
14
votes
4answers
17k views

How to sniff for wireless MAC addresses in area - My laptop got stolen

A few days ago my apartment got broken in, and they took all the electronics, including my $1500 laptop. We are pretty sure it's an inside job (as in someone from the same building), so I believe ...
10
votes
3answers
20k views

Is there a nice, graphical, packet sniffer for Mac OSX?

I have Wireshark and have used tcpdump, but I was wondering if there was a nice GUI to capture and view packets on the Mac. Ideally, something that is protocol aware, so that it knows how to break up ...
8
votes
4answers
7k views

Windows tool to find out which port an app is trying to use?

I am guessing that netstat shows apps and their ports that already have a connection and it doesn't show or can't show an app that is trying to open a connection. If I have an app that's trying to ...
7
votes
3answers
9k views

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V ...
7
votes
1answer
9k views

Wireless Card that supports promiscuous mode in Windows 7

I'm trying to use wireshark to learn a bit about networking and capturing packets. However, from what I understand, the combination of windows 7 + various wifi chips don't allow the network card to ...
7
votes
2answers
2k views

RS232 Packet Sniffer

I'm working on a software development project that requires me to send signals to a device via RS232 port. Sadly the included utilities for transferring to and from the device would not work for mass ...
7
votes
2answers
843 views

On an unencrypted public wi-fi hotspot, what exactly is a packet sniffer doing to get another computer's packet?

I get mixed results when reading information security articles, some of them stating that in order to do something similar you need to also setup some sort of honeypot with a running access point and ...
6
votes
4answers
4k views

Get active network interface on Windows

I'm developing an application that provides a UI to windump, the packet sniffer. Windump has a "-D" parameter that lists all network interfaces it can find, and then you can specify which interface to ...
6
votes
3answers
2k views

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! ...
5
votes
5answers
424 views

Looking for a packet builder

Can anyone recommend a quality packet builder? I'm analyzing network traffic (academic purposes) with Wireshark, and I'd like to be able to create packets as well. Open Source is always a bonus. ...
5
votes
1answer
2k views

How can I use Teamviewer anonymously with TOR network?

I would like to be able to use Teamviewer anonymously to avoid revealing my real IP address while I access sensitive data on my remote server. The data being transferred is encrypted. I have looked ...
5
votes
1answer
1k views

Is there a popular application for Windows 7 to find nearby WiFi networks?

I was wondering if we can use a third party program, besides "Network and Sharing Center," to find WiFi networks. Is there a popular and recommended application for Windows 7 that finds WiFi ...
5
votes
1answer
19k views

Capturing wireless traffic (using Wireshark)

When I run wireshark on a wired network it works fine and reports all of the packets. When I run it on a wireless network though I only see my own traffic. The wireless card I have is supposed to ...
5
votes
3answers
7k views

Capture traffic for specific application

I have an application which communicates with some server. I want to know what the IP of this server is. How can I capture all the traffic from a specific application and not just all the traffic like ...
5
votes
5answers
501 views

Download videos from youtube as I see it

This may seem a somewhat strange requirement : I want to download youtube videos as I see it. I know that I would have to capture the packets using a program like wireshark , and I do know that this ...
4
votes
5answers
216 views

What is the best program to know what applications are doing with online connections? [closed]

Does anyone know a small tool that you install which simply informs you of what information applications are sending with their online connections, e.g. so if you are installing photoshop elements ...
4
votes
2answers
5k views

How to make tcpdump (or other tool) to actually dump TCP stream?

I expect something like this: $ nc example.com 80 GET / HTTP/1.0 HTTP/1.0 500 K.O. Content-Type: application/null Content-Length: -1 $ Meanwhile: # tcpdump -i eth0 --actually-dump-all-tcp ...
4
votes
2answers
4k views

Can anyone read (sniff) my Google Talk messages?

When I use Google Talk over https://gmail.com can anyone read (sniff) my messages?
4
votes
2answers
967 views

Unable to capture outgoing traffic with Wireshark on wi-fi network

I'm trying to use Wireshark on Backtrack 5 to capture packets that are transmitted through my home wi-fi network. I'm perfectly able to capture outgoing traffic from localhost and, it seems, incoming ...
4
votes
3answers
7k views

Packet Sniff over Wi-Fi

I've got a non-PC wireless client, and I'm wondering about some of its connections. I want to see the actual packets being exchanged from the net to my device over a Wi-Fi connection. I have ...
4
votes
2answers
102 views

wifi router is masking ip addresses

I have a rookie question regarding routing and wifi access points. Background I have a main switch (cisco catalyst 2950) that sits behind my router/firewall. On that switch I have an IDS (snort) ...
4
votes
1answer
2k views

Can you sniff packets of an open wifi network that you are not connected to?

I mean, just see all the packets going though the air.. is this possible with Wireshark, for example?
3
votes
5answers
47k views

Hacking into WiFi using OS X! [closed]

Is there a software that would help me to crack WiFi? I'm not doing anything illegal, we have a bet going on within our organization (I read that WiFi can be hacked). my price is lunch (and i'm ...
3
votes
2answers
2k views

Monitor Network Traffic on WPA

I know the password to the network. All I want to do is see what is going on. I don't care if it's encrypted. How do I do this? Help!
3
votes
4answers
22k views

How can I capture packets going from my router to a specific server?

I have a small local network in my house that has two computers connected to a modem-router. I want to capture the packets going from the router to a specific server (I know the IP address of the ...
3
votes
1answer
2k views

Sniff process communication on Windows 7

I have two local processes which communicate to let the other execute commands. And I want to know what they are talking about. After some first investigation, it's not over Sockets or Loopback, but ...
3
votes
3answers
12k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
3
votes
1answer
133 views

Interactive network sniffing

I'm looking for what essentially amounts to an "interactive" Wireshark. I am looking for a tool that allows me to view network traffic on a given port and allow/deny/modify traffic on a per-packet ...
2
votes
4answers
673 views

Packet sniffing and my passwords

I am designing a website and have been learning about POST and GET requests and how POST requests can be read through 'packet sniffing'. Further reading seems to suggest that the data flowing to and ...
2
votes
2answers
550 views

How do I create a wireless linux router from a spare server?

I'm going to be doing some experiments with network traffic sniffing and I would like to setup a linux box as my home router. Are there any really easy ways to do this and have a web-configurable ...
2
votes
2answers
445 views

Program to record data transmission between two computers using a TCP port

I am looking for a way to view data being transmitted over a TCP port between two computers. Is there a software package that allows this? I suppose I could script something to re-route data coming ...
2
votes
3answers
1k views

Can I do packet sniffing out of the box on OS X?

I'm doing some development, a Java app that communicates via HTTP. The log4j isn't helping me much so I'd like to see the actual HTTP Request that I am creating once it gets sent out. I know that in ...
2
votes
2answers
5k views

Usefulness of packets in wireshark? SSDP protocol, rather than HTTP?

I used to be able to filter my wireshark packets to get useful information from them. However, with my current configuration on OSX, all of the HTTP traffic is coming through as the SSDP protocol and ...
2
votes
4answers
1k views

Software to view all HTTP connections made by your computer? [closed]

I would like to see all HTTP connections (with free and preferably open source software), and their full responses made by my computer. A performance hit doesn't matter, as I will use this only in ...
2
votes
2answers
4k views

Replay UDP Packet Capture

I have a UDP packet capture which was streamed from Port1 on IP1 to Port2 on IP2 on network N1. I need to replay these packets on another network N2 from Port3 on IP3 to Port4 on IP4. I need to know ...
2
votes
1answer
69 views

Is there a good tool that lets me sniff the network calls?

My objective: Itunes talks to their cloud servers. I want to be able to know which URL they are talking to when I use my Itunes. How can I do that?
2
votes
1answer
3k views

Wireshark - How do i filter the TCP[RST] packet?

I am looking for filter out the TCP[RST] packets on wireshark. I have tried tcp.analysis.flag but it didn't help.
2
votes
5answers
16k views

How do I limit packet capturing in Wireshark to only a specific protocol?

I would like to listen to HTTP traffic on port 8080. When I start capturing packets in Wireshark, it's flooded by packets using the SSDP protocol on port 1900. I would like to limit the packet ...
2
votes
2answers
129 views

How does HTTPS avoids the key for encryption to be sniffed in the first place?

When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right? So, to do that, at some point the key have to travel unencrypted from one computer to ...
2
votes
2answers
407 views

Packet sniffer for router in windows

Is there a packet analyzer for windows for analyzing packets that passes through the router?
2
votes
1answer
807 views

Is there a way to sniff packets encrypted with WPA(2)?

I was reading about the recent FireSheep tool. People are saying that it is fine to sniff WPA/2 PSK networks because if you have the PSK, you can decrypt anyone's traffic. I am wondering if there are ...
2
votes
4answers
2k views

In Windows OS, some background process consuming 75 MB Network data ( BroadBand wastage) everyday. How can I find that background process?

I am using limited BroadBand ( I can use up to 3GB per month). BroadBand company charges extra money if I use beyond 3 GB. Everyday one ( or more) background process utilizing 75 MB of Internet ...
2
votes
1answer
2k views

What speed are Wi-Fi management and control frames sent at?

There are a bunch of different 802.11 Wi-Fi standards, e.g. 802.11a, 802.11b, 802.11g, 802.11n etc. that all support different speeds. Wi-Fi frames are generally categorised as one of the following: ...
2
votes
1answer
371 views

Forwarding wifi traffic to wired pc

I'm trying to play around with Wireshark on my home network, and was wondering if there is a way to create a new connection on my PC that receives all wifi packets on the network. The PC is a wired ...
2
votes
1answer
2k views

How do I un-gzip data captured by Wireshark?

I have a Wireshark capture file with a HTTP request, however, the request is gzipped. My question is how can I ungzip it so see what data was transfered in cleartext? The capture file is here if ...
2
votes
2answers
246 views

How to I capture HTTP header traffic in my home network

I'm trying to experiment with some HTTP data for a personal project. What I would like to do is capture all the HTTP traffic that passes through my Wifi Router at home and use that data for some ...
2
votes
1answer
513 views

Change TCP sequence numbers for packet replay?

First off, I'm using wireshark for capture and colasoft for replay. I'm attempting to replay a group of captured packets back, looped to be done several times over (the purpose of this is just to send ...