Open-source network packet analyzer

learn more… | top users | synonyms

3
votes
0answers
407 views

Capturing Internet Connection Sharing (ICS) traffic using Fiddler

Does anyone have any idea how to capture HTTP traffic that goes through my ICS connection? Full details: I have a PC connected to internet via Ethernet. PC has set up a Wifi Hotspot using Internet ...
3
votes
0answers
2k views

Having trouble Getting “RTSP over HTTP”

There is an axis camera that is connected to our site (camba.tv) through axis one click connection component (which acts as proxy). We can communicate with this camera only through http by setting the ...
2
votes
0answers
1k views

tcp port numbers reused on wireshark

I used raw socket to build a tcp client program on machine A to reproduce tcp 3-way handshake with a simple regular tcp server on machine B I captured packets on the client host and server host, and ...
2
votes
0answers
338 views

Decode SSL packets in WireShark

I have cert.cer, base64 x509 and a Wireshark dump in .pcap format. The packets are encoded, so how do I decode them? Now: [site-ip],443,http,xe.cer but it's still not working.
2
votes
0answers
451 views

Wireshark vs Netmon for precise time tagging

I'm using Wireshark to time tag and get some statistics on multicast traffic. When there is not much traffic, the stats looks good, but as soon as there is a bunch of packets arriving at the same ...
1
vote
0answers
43 views

Capture network traffic between VM's Virtualbox using Wireshark

I'm trying to capture all network traffic between VMs (and in the VMs to themselves) running on a single host using Virtualbox for the VMs and Wireshark for the capturing. VMs are Ubuntu 14.04 and the ...
1
vote
0answers
18 views

Route network traffic back to the same wire

I would like to monitor outgoing traffic from my wi-fi connected phone using Wireshark on my Windows desktop. I changed default gateway on the phone to the IP of the desktop and Wireshark can now see ...
1
vote
0answers
209 views

how to sniff from a TP-Link ADSL modem?

I have a PC and a tablet that connected to a TP-Link ADSL modem. PROBLEM: I want to see the packets that send and receive from my modem not my PC( to see both wire and wireless packets) I search ...
1
vote
0answers
124 views

RST, ACK from 216.98.48.133 without any SYN from me? For real? How? Why?

I am trying to figure out why I always get "The Ubisoft server is not available at the time. Please try again later." Apparently, the server is actually up and running, so it seems the problem is on ...
1
vote
0answers
93 views

mergecap fails to create output file when run from crontab

I have created a script to merge pcap files using 'mergecap -w '. The script doesn't work as the output file is not already present. So I tried to use 'touch outputfile.pcap' before the mergecap ...
1
vote
0answers
22 views

Utility service that logs total network usage

I would like to know the total bandwidth our internet provider essentially provides to the many competing devices in our home. Is there a simple windows service that uses a wireshark like trick to log ...
1
vote
0answers
455 views

How to troubleshoot a VPN connection drop

I have a Windows 8 machine that won't connect to a work VPN (other machines configured the same* way work fine). The IT dept at work says the attempt never shows up in the logs. On my computer, it ...
1
vote
0answers
220 views

What happens when Capturing USB Packets using Wireshark

I am trying to capture the packets sent by a Mouse to a host PC using Wireshark. Operating System - Ubuntu 12.04 Wireshark - 1.8.2 Problem 1.) Before I plug in the USB Mouse, when I start the ...
1
vote
0answers
299 views

Booting with nfs just prints some weird character

Problem I have an embedded system which I am unable to boot via NFS using an Embedded Linux Kernel Image and rootfs both placed on my laptop (which serves as the NFS server as well as a TFTP ...
0
votes
0answers
40 views

packet sniffing 3ds

I am trying to packet sniff my 3DS just to see what information is available. With Wireshark I noticed that I can only capture traffic which communicates with my computer directly, and not any device ...
0
votes
0answers
31 views

How to get the exact order of pieces downloaded by bittorrent client?

To know more about torrent download, I used wireshark to capture the packets transferred during the download. I was able to find that a file is split into multiple pieces that comes from different ...
0
votes
0answers
19 views

How to change mode of an airmon-ng created interface(mon0) from managed to monitor?

I am connecting to a home router using wifi. The detais of my wireless cards are as follows: #lspci 01:00.0 Network controller: Qualcomm Atheros AR9485 Wireless Network Adapter (rev 01) #lspci -vv ...
0
votes
0answers
22 views

Wireshark dont work after install VirtualBox

I have the following problem whit Wireshark. I function normally until I installed Oracle VM VirtualBox, after installation of said program to me at the start Wireshark occur following problem: "No ...
0
votes
0answers
24 views

Eliminating extraneous network traffic

If I wanted to get the best performance (high data rate, low latency) out of an isolated gigabit ethernet LAN (N.B. NOT connected to the internet) I would assume this would occur when there was no ...
0
votes
0answers
43 views

Capturing 802.11n HT control on wireshark

1) Using wireshark 1.12.2 with kernel 3.8.0-44-generic I cannot see any HTC+ fields in my packets. Is this a dissector issue in wireshark or related to my wireless nic. I have tried on both an alfa ...
0
votes
0answers
12 views

Mergecap multithread

I need to merge a lot of pcap files into one. I ran the command "mergecap *.pcap -w outputFile" , and it actually merges the files, but it's really slow. I was wondering if there's a way to launch a ...
0
votes
0answers
28 views

UPnP Discover can't captured by Wireshark

According to the UPnP standard, the UPnP discover packet should send to 239.255.255.250:1900. However, when my program send to 239.255.255.250:1900, the wireshark can't captured the packet. When my ...
0
votes
0answers
23 views

Can network sniffing in promisc mode on a network bridge produce “false” TCP retransmissions?

I have a Wireshark log from a computer that was running Ubuntu and tshark. The computer has two NICs and I've connected them to a bridge (using /etc/network/interfaces) and gave that bridge a static ...
0
votes
0answers
49 views

Kerberos authentication failure: “SAM Active Directory Response - user unknown”

Everyone on our network is currently unable to access shared resources on our file server (SBS 2003 server with Windows 7 & XP workstations). A Wireshark packet capture revealed the following ...
0
votes
0answers
29 views

Wireshark doesn't capture successful pings towards me

So I disabled WAN blocking of my modem/router, I allowed ICMP in inbound and outbound firewall options, and I am capturing icmp filtered packets in Wireshark. It captures all pings I made, but: It ...
0
votes
0answers
30 views

Filter for Wireshark to show amount of downloaded data from a specific host

Need to check amount of downloaded data from some address when there are connection issues. Such issues are emulated with clumsy (http://jagt.github.io/clumsy/index.html). All packets that are ...
0
votes
0answers
75 views

Verify python request with wireshark or proxy HTTPS

I am working on a scraper, that is scraping data using python requests package. The website has a secured connection (https). I managed to get over the login part, over the search part, and now I have ...
0
votes
0answers
32 views

Wireshark - Cannot find any Content Encoding header

I am using Wireshark in order to investigate some websites. After the site finishes loading, I checked on Wireshark with the filter "http.content-encoding" and cannot see any frame containing that ...
0
votes
0answers
64 views

Wireshark does not pick up outbound traffic

I have a bit of 'n problem at a client. We are running a WCF Client/Server application, and for some reason when one of the users try to connect to the server, he gets a timeout, but the second time ...
0
votes
0answers
58 views

Ettercap and Wireshark broken when not logged in as root

I'm having an issue with Kali Linux (v.1.0.8-amd64) where network sniffing programs such as the aforementioned are not displaying my network interfaces, thus not allowing me to use them. This only ...
0
votes
0answers
60 views

Force Wireshark to decode part of Data as another protocol

I have some traffic samples where the Layer 2 is PPP and the next protocol field value is 0x0281, which indicates MPLS Unicast. There are 4 bytes following this PPP header before I see the IP header. ...
0
votes
0answers
34 views

Drop network packages

I'm seeing a lot more protocols in the wireshark capture in my university network than in my home network and the connection is incredibly bad at the university (> 2 Min. to get an IP address from ...
0
votes
0answers
39 views

cannot listen to interfaces without root privilege

for certain reason, I wanted to capture traffic without being root. Setup: Host: Ubuntu 3.11.0 Guest Ubuntu 3.13.0 Wireshark in Guest:1.10.8 I have done this trying to enable capturing without ...
0
votes
0answers
894 views

WinPcap/Wireshark install: where is packet.dll?

I have Wireshark installed, and I'm getting this error: The NPF driver isn't running. You may have trouble capturing or listing interfaces. I realize this is something to do with WinPcap. It's ...
0
votes
0answers
14 views

Multiple Packets info are clumping together in a single line while taking wireshark traces

I am facing a problem with Wireshark traces wherein the info from multiple packets is clumped in a single line (i.e. in single line multiple packets are displaying instead of each single packet being ...
0
votes
0answers
401 views

change gtk-based wireshark to qt based one in homebrew

I have install wireshark on OSX using homebrew: brew install wireshark --with-gtk+ However, now I want a qt-based version, and I am supposed to do brew install wireshark --qt There is doubt homebrew ...
0
votes
0answers
41 views

Unable to intercept data intended for gateway by using ARP

I am having trouble with what seems to be a very simple problem. I manage to be able to successfully spoof the ARP table of one computer on my network (as reported by arp -a). But even enabling a ...
0
votes
0answers
199 views

Wireshark Capture Filter

I am new to wireshark and I am trying to capture an ICMP packet over 802.11g, I am using windows and pingplotter. The issue is that on wireshark capture I am not getting any ICMP packets no matter how ...
0
votes
0answers
89 views

How to enable LUA in wireshark?

This question is for Linux Centos Platform. I am doing a project in which Wireshark Traffic is to to be exported to a .pcap file and later used for further analysis. This export is to be automatic ...
0
votes
0answers
278 views

Using Fiddler to capture traffic from smart tv

I've set up Fiddler to capture HTTPS CONNECTs and decrypt HTTPS traffic using a certificate. I also enabled "Allow remote computers to connect" and set up the proxy on both Fiddler and my tv. It ...
0
votes
0answers
85 views

How to send packet on tor network to get back to my computer?

Can anyone tell me how to configure system (I think Linux is the best option for this) to be able to send packet by Tor Network back to my own computer? I have to conduct research on how it behaves (I ...
0
votes
0answers
189 views

wireshark: decrypt live SSL traffic

w.r.t decryting SSL traffic with wireshark, I've seen the sample capture from wireshark website and it worked fine. What I'd like to achieve is to decode live traffic. So the key I guess is to ...
0
votes
0answers
174 views

Passing through TOS/DSCP through two layers of OpenVPN, possible?

About a week ago I posted about a problem I am having getting usable VoIP connections working on a machine configured using mirimir's dual-VPN isolation system. (For details on the setup see my ...
0
votes
0answers
212 views

Wireshark on CentOS does not start

I'm using CentOS 6.4 64bit. When I run wireshark i get the following error: No protocol specified (wireshark:3620): Gtk-WARNING **: cannot open display: :0.0 It has come to my attention ...
0
votes
0answers
374 views

Analyzing home network traffic using wireshark

I am using wireshark to analyize my home netowrk traffic since it has become painfully slow (Slow download speeds) recently (restarting modem and MediaLink router didn't help, also upgraded the ...
0
votes
0answers
173 views

Traffic of virtual machine capture in ubuntu 12

I have ubuntu 12 running on my PC . On this Ubuntu, I have another linux distribution running on a virtual machine (virtual box). When I launch a ping from ubuntu to the virtual machine, the ping ...
0
votes
0answers
491 views

Synergy choppiness: Is my wireless router delaying packets after silent period?

I am sharing keyboard and mouse between my Linux desktop and MacBook Air using Synergy. There is a very noticeable lag every time I begin moving my mouse (or start typing), but everything becomes ...
0
votes
0answers
243 views

DNS leak: Looking up own hostname with DNS queries

I was checking a proxied program for DNS leaks with tshark when I noticed this: 13.170066 10.0.2.15 -> 192.168.1.1 DNS 66 Standard query 0xd473 A [hostname] 13.753496 10.0.2.15 -> ...
0
votes
0answers
392 views

Wireshark does not show any HTTP traffic

My PC is running windows XP. I have been trying to capture HTTP traffic but if I apply the following filters, the Wireshark gives results not required http result: it only show ssdp traffic http ...
0
votes
0answers
160 views

Saving traffic on a port to pcap format using an active intermediary

I have a service which listens on host1:5000. My intention is to redirect my client to localhost:5000. What I desire is a service running on localhost:5000 that redirects all traffic to host1:5000 ...