Open-source network packet analyzer

learn more… | top users | synonyms

2
votes
1answer
2k views

How do I un-gzip data captured by Wireshark?

I have a Wireshark capture file with a HTTP request, however, the request is gzipped. My question is how can I ungzip it so see what data was transfered in cleartext? The capture file is here if ...
5
votes
3answers
8k views

Capture traffic for specific application

I have an application which communicates with some server. I want to know what the IP of this server is. How can I capture all the traffic from a specific application and not just all the traffic like ...
2
votes
3answers
5k views

Wireshark - permission problem in Ubuntu

I installed wireshark (tshark) using sudo apt-get install tshark this installed the tshark executable in /usr/bin/tshark. The problem now is that I am unable to run it without root permissions. ...
2
votes
1answer
262 views

What is wag-service?

Does anyone know what wag-service is? I'm seeing it a lot in Wireshark
4
votes
1answer
3k views

How to filter those TCP packets on Wireshark/Ethereal?

Packets that I want to see (just samples, there are thousands of them): 314 2.280146 192.168.0.1 192.168.0.2 TCP ah-esp-encap > 11188 [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=121 316 2.290003 ...
5
votes
2answers
8k views

How to write a filter in Wireshark/Ethereal that displays only packets with a specific string?

Wireshark supports filters like this: ip.addr == 192.168.0.1 What is the syntax to check the packet content? (C# equivalent of what I want) content.Contains("whateverYouWant")
2
votes
1answer
820 views

Have wireshark save the capture-stream at a certain amount of frames, then start new capture

Wireshark can easily capture hundreds of thousands of captures in under an hour. I'm wondering if it's possible to configure Wireshark to have WireShark save the capture after a certain amount of ...
0
votes
2answers
5k views

Wireshark does not see interfaces (winXP)

Short story: Wireshark is working....on my winXP-32b ... usage .... Long long time later Wireshark does not work It can't find any usefull interface (just VPN) ipconfig /all Ethernet adapter ...
1
vote
2answers
3k views

How can I monitor the traffic on a single port?

I am developing a python messenger client but I feel this is more targeted to superuser than StackOverflow. My server application seems not to get the data sent from time to time, so I want to see ...
1
vote
1answer
2k views

Multi language support in wireshark

Do we have multiple language support with Wireshark. We are using Windows Xp SP2 and Ubuntu Linux environment. Actually we have a plugin which is UDP based and we have a requirement to Analyse the ...