commandline packet analyzer
0
votes
2answers
237 views
TCP packets not captured by PHP listener
I have a device (GPS localizer) that is sending TCP (I think so) packets to my server on given IP address and through given port. Since I have only SSH access to that server, I opened up two sessions ...
0
votes
2answers
133 views
Able to write on stdout but not in a file
I want to keep a trace of the URL I visit, so I use a command line like this:
tcpdump -ien1 -v -X 'tcp port 80' | sed -nl
's/^.0x[0-9a-f]{4}:.{43}(.)$/\1/p' |perl break.pl |perl -pe
...
2
votes
1answer
65 views
How to output a simple network activity plot in console in Linux?
There's tload that plots load average.
There's iftop that network usage as bars.
How to do something like this:
# tcpdump -i eth0 --plot 'host 1.2.3.4'
13:45:03 | | 0 in 0 ...
0
votes
1answer
24 views
LAN assembly 2 packets into 1 packets?
I have two computers A and B, there is a TCP connection between them. I use TCPdump to capture the packets.
I notice that when A sends a lot of TCP packets to B, each IP packets are 1514 bytes.
In ...
0
votes
1answer
112 views
How do I capture 802.11 headers on an AP while not in monitor mode?
I am wondering if it is possible to extract 802.11 frames on a router running OpenWrt operating as an access point. I tried using tcpdump and loading the dumped packets in Wireshark, but I could only ...
0
votes
1answer
180 views
Can't display RSSI values in Wireshark
I am trying to analyze the up-link Wireless traffic generated by my Sony Ericsson phone and captured by my D-Link router, on which I installed the DD-WRT firmware.
To do this, first I log in the ...
0
votes
1answer
206 views
my tcpdump always filters packets?
I've been using tcpdump for about a month now, and recently, it has stopped capturing any packets that were not sent to or from the computer running tcpdump. I've stripped down my command to just:
...
1
vote
0answers
105 views
tcpdump loses connection
I'm on Ubuntu – but it's the same on Debian. I'm using tcpdump in order to track the connection of computers on my private network. At some point, the internet connection of the computers launching ...
1
vote
0answers
224 views
latency measurement on Linux-based router using tcpdump
I am using tcpdump to measure latency on a linux router, i.e. the delay experienced by packets as they pass through the router (made of Ubuntu 10). For this purpose, I captured packets in the IN and ...
0
votes
0answers
34 views
Executing tcpdump remotely while storing packet capture locally
I have run into stumbling block while attempting to create a bash script that will write packet capture files from tcpdump onto a remote server, while displaying the output of the tcpdump command so ...
0
votes
0answers
39 views
can firewall send RST packets in response to a TCP SYN?
I used tcpdump to capture packets on a host 6.23.33.44 when a program on it sends some TCP packets, these TCP packets are crafted using raw socket. So, actually there is no tcp connection between ...
0
votes
0answers
90 views
iptables blocking some icmp traffic
I have 2 nodes that check each other for health. Most of the ports checkout ok but there is an icmp packet that isn't passing the firewall. Ping works fine. Not sure what to make of it but if I ...
0
votes
0answers
52 views
Is it possible to see password tries on DD-WRT enabled router?
Is it possible to read the password tries devices on my network send to my router? Like say my network password is 'foobar' but someone on an iPhone who tries to connect types 'barfoo', would I be ...
0
votes
0answers
167 views
Capture and Display Filters for HTTP/HTTPS using TCPDump or TShark
I am running CentOS v5.8 64bit. What are the correct capture and display filters to use in TCPDump or TShark to monitor and trace HTTP/HTTPS traffic similar to what is provided by HTTPWatch?
Also, ...
0
votes
0answers
2k views
How do I make tcpdump to write to file for each packet it captures?
I'm running the following version of tcpdump:
tcpdump version 4.0.0
libpcap version 1.0.0
I want to make tcpdump write to a file for each packet it captures. Currently, I could only see the ...
