The network protocol analyzer developed and maintained by the Wireshark Foundation

learn more… | top users | synonyms

7
votes
1answer
24k views

Capturing wireless traffic (using Wireshark)

When I run wireshark on a wired network it works fine and reports all of the packets. When I run it on a wireless network though I only see my own traffic. The wireless card I have is supposed to ...
7
votes
6answers
3k views

Lightweight tool for viewing raw HTTP messages?

I'm investigating differences in behaviour between a couple of Web servers. I need to see raw response data from the servers (i.e. before the response is de-chunked if it has ...
0
votes
2answers
77 views

How to get the exact order of pieces downloaded by bittorrent client?

To know more about torrent download, I used wireshark to capture the packets transferred during the download. I was able to find that a file is split into multiple pieces that comes from different ...
3
votes
3answers
1k views

How to measure network traffic by protocol?

I would like to select a type of traffic, as I do in Wireshark, and measure the total traffic in each way for this filter. Is it possible with Wireshark? Is it possible with another Windows tool?
1
vote
1answer
173 views

How to differentiate between three different flavours of pcap files?

There appears to be 3 different file formats associated with the ".pcap" extension -- libpcap /w microsecond timestamps, libpcap /w nanosecond timestamps, and pcapng. Is there an easy way to ...
0
votes
2answers
126 views

Duplicate IP address Telnet and ARP

I have 3 hosts (PC1, PC2, and PC3). I set the IP addresses for PC2 and PC3 to be 10.0.0.2 and PC3 to be 10.0.0.1. I telnet from PC1 to 10.0.0.2. I then am logged in to PC3. I can see in Wireshark that ...
0
votes
1answer
2k views

How to monitor traffic passing through my Wi-Fi access point

I know how to monitor the network interfaces on my local computer with Wireshark. But, how do I monitor the traffic flowing through my wireless access point from connected computers? It seems like ...
4
votes
3answers
8k views

Packet Sniff over Wi-Fi

I've got a non-PC wireless client, and I'm wondering about some of its connections. I want to see the actual packets being exchanged from the net to my device over a Wi-Fi connection. I have ...
8
votes
3answers
12k views

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V ...
7
votes
3answers
14k views

X11/XQuartz won't auto-launch after upgrading to OS X Mavericks?

I can't use Wireshark on latest OS X 10.9 Mavericks. Previously, I was using XQuartz to run X11 applications like Wireshark. But, yesterday, after I upgraded my iMac operating system to OS X 10.9, ...
2
votes
1answer
1k views

Record multicast stream on multi-homed Linux host

I have what sounds like the simplest possible use case, and yet nothing is satisfactory. I have a multi-homed host and I would like to listen to multicasts on eth1, and shove all the payload (NOT ...
8
votes
4answers
3k views

Concern over running WireShark as root

I started WireShark on my Ubuntu machine and discovered that there were no interfaces I could listen to. So I launched it as root. This gave me access to all the interfaces, but gave me a warning: ...
3
votes
2answers
2k views

How do I trace HTTP packets with Wireshark?

What can I do in order to see packets that come from different sessions in a web page? For example when I open yahoo.com there are different sessions in yahoo; I dont know how to see which packet is ...
1
vote
3answers
3k views

SSL (imap) doesn't work from some machines - ssl handshake failure - how to narrow down further?

A few days ago our IMAP SSL (port 993) connections stopped working from our home network two Windows 7 PCs in our home network. Two other PCs, one with Windows XP, one also with Win7 professional ...
5
votes
1answer
3k views

How to determine what program send the packet recorded in Wireshark?

I was taking some tutorials on Wireshark in order to analyze the packets sent and received when talking to a web server for purposes of learning. When I start listening/recording packets in ...
5
votes
4answers
13k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
3
votes
2answers
2k views

Wireshark: Accessing USB Bus Interfaces without sudo

I am trying to monitor some USB traffic using Wireshark on Linux (Ubuntu). If I start Wireshark as my normal user without root privileges, the USB bus interfaces are not listed. If I sudo wireshark ...
3
votes
2answers
864 views

My Mac trying to connect to a possible intruder's machine, that is not in the network anymore

I just asked a question I think someone else has access to my wireless network. What next?. I have changed wireless security to WPA2, changed the password, disabled file sharing etc as =suggested in ...
2
votes
3answers
10k views

Wireshark Not Displaying Packets From Other Network Devices, Even in Promisc Mode

System Setup: MacBook Air running Mountain Lion and connected wirelessly to a router. Wireshark installed and capturing packets (I have "capture all in promiscuous mode" checked) I filter out all ...
1
vote
1answer
232 views

Find out what programs are heavily using the network

Currently, I have a process on my Windows 7 system which is saturating the incoming broadband internet connection (75Mbit/s) and almost completely saturating the 100Mbit network controller. I cannot ...
1
vote
2answers
2k views

Wireshark - Help seeing all network traffic

I have a Ralink RT3290 802.11bgn Wi-Fi Adapter and am running Windows 8. Sadly although my new computer helps in the design and testing of my touch based applications, my Network Engineering abilities ...
1
vote
2answers
810 views

404 error - Finding what wasn't found with wireshark

I am using Wireshark to view my HTTP activity. When there is a 404 Not Found error returned, I can't find an easy way to determine what request could not found. Can anyone explain how to do this?
0
votes
1answer
147 views

Wireshark with lua

I have installed wireshark on my Centos Machine. I want an auto script for it and i am planning to script it using LUA. However, my wireshark is without LUA. How to enable wireshark which allows LUA ...
0
votes
2answers
6k views

How can I capture other computers traffic in Wireshark on a WiFi-network?

I run Wireshark on a MacBook Air and I also have a Android phone on the same WiFi-network. If I visit a website with the Android phone I can't see that DNS-traffic (or other traffic) in Wireshark on ...