Questions tagged [sniffing]
Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.
289
questions
1
vote
1
answer
35
views
Debugging internet connectivity delay issue
Problem
For quite some time now, I am experiencing hiccups in my network connection, although the speeds are on par with what ISP offers (tested with https://speed.cloudflare.com/). Specifically, when ...
- 141
0
votes
0
answers
75
views
Cannot see HTTP when using Wireshark on two different models of Alfa Wi-Fi adapters
I just upgraded my Wi-Fi adapter from Alfa AWUS036ACS to the Alfa AWUS036ACM and I can tell it's much better.
However, I am still not getting the desired results in Wireshark which leads me to believe ...
- 15
0
votes
1
answer
156
views
How does 802.11a,b,g,n,ac and channel factor into sniffing with wireshark?
I have been playing around with wireshark lately and am wondering how your 802.11 version as well as channel impact packet capture? If my router uses 802.11a,g,n and ac and my wifi adapter uses 802....
- 15
0
votes
1
answer
57
views
Will this adapter work with wireshark?
Will the Alfa awus036acm with mt7612u chipset work with wireshark 6.0.2 on Kali 6.0.0 for packet sniffing tcp,udp,dns,http,etc? I have seen both negative and positive reviews on it so I'm not sure.
- 15
0
votes
0
answers
110
views
Why is Wireshark not showing any TCP, UDP, DNS or HTTP traffic?
I'm using Wireshark 4.0.2 on Kali 6.0.0 with an Alfa AWUS036ACS and in managed mode with promiscuous mode enabled I don't see any TCP, UDP, DNS or HTTP.
If I switch to monitor mode with promiscuous ...
- 15
0
votes
1
answer
107
views
Logging network traffic of a specific app in Linux inside docker, stopping it from reaching the internet and spoofing responses
I have an app (Google's Android Emulator running via QEMU) running on Ubuntu inside a docker instance.
I want to:
Capture all network traffic (packets) comming from a VM running inside QEMU.
Prevent ...
- 11
0
votes
1
answer
93
views
Enabling a diverter in fakenet-ng on Ubuntu Linux disables all network traffic
I am trying to capture network traffic from within a docker container running Ubuntu. I am using Flare's Fakenet-ng for this, as I didn't find any better tool suited for the job (capturing network ...
- 11
0
votes
1
answer
244
views
How to use ciscodump?
In wireshark, there is this option called Cisco remote capture: ciscodump, which, from my understanding, should enable to do a tcpdump on a cisco router (for example) via SSH and get back the results ...
1
vote
0
answers
193
views
How do I capture non-local packets using WireShark on MacOS?
This is a pretty simple question.
I'm trying to use WireShark to capture packets using my MacBook Pro 2019. Every time I run a capture on en0 (my Wi-Fi interface), all I am seeing is packets directed ...
- 141
0
votes
1
answer
450
views
Why do Bluetooth packet sniffing tutorials for Windows require an adapter?
My laptop can very clearly scan for and receive data from Bluetooth signals, yet every tutorial I've read online requires the use of an adapter.
e.g. https://hackaday.com/2021/03/23/a-crash-course-on-...
- 1
3
votes
0
answers
46
views
Which driver is resuming my USB device?
I have a USB device that correctly enters in Suspend state, but it gets Resumed after a couple of seconds, then goes back to Suspend state and the loop continues.
This happens on my notebook (Windows ...
- 432
0
votes
1
answer
1k
views
Capturing management frames using Windows Network Monitor
I am trying to capture network traffic - specifically management frames (and from these, particularly beacon frames) in Windows.
My wireless NIC is Intel Wifi AX201 160mhz, which seems to support ...
- 167
1
vote
1
answer
145
views
Start network capture as soon as interface is up
I'm trying to debug the network traffic that happens right when a USB RNDIS network adapter is plugged in. Right now I can use Wireshark to analyze the traffic after the USB has already been plugged ...
- 275
1
vote
1
answer
732
views
How raw sockets work?
Recently I developed a packet sniffer in python using socket module. In order to do that, I created a socket of type raw. Then I started receiving and parsing packets.
My assumption was, by default, ...
1
vote
0
answers
32
views
Capturing network traffic of a single Application/Tab
I often come across a situation where I have to analyze external communication of a Mobile or Desktop Application or even a paritcular tab of a browser. I sniff traffic usually with wireshark but at ...
- 111
1
vote
1
answer
4k
views
How can I sniff all my router traffic with Wireshark?
I recently bought a WiFi adapter with Monitor mode (Alfa Network AWUS036NHA) and I want to sniff all my network traffic at my home.
The goal is to detect some packets sent and received by my 'physical'...
- 11
1
vote
0
answers
564
views
Sniffing with Wireshark Monitor mode not available
So I want to sniff WiFi traffic in my network (not the device wireshark is running on) while being connected so no decrypting with PSK.
My WiFi card does support Monitor mode and Injections, however ...
- 11
0
votes
1
answer
321
views
Wireshark in windows 10 not showing "80211" header for Link Layer Header column
I am trying to capture Wi-Fi frames and check few parameters of 802.11. For that, I was trying to set the Link Layer Header of Capture Options in the wire shark. The drop down of the Interface WiFi is ...
- 141
1
vote
1
answer
345
views
Retrieving MAC address via tunnel
Currently I'm working on adding my own software to provide internet support to an old MS-DOS game. Because my primary environment is Linux, I use DOSBOX from within Linux and feed my internet ...
Mike St
0
votes
1
answer
45
views
see DNS request hosts from any wireless networks(without knowing password)
I want to know hosts from DNS requests in any wireless network. Is it possible without knowing wifi passwords ? If yes, please list the steps.
- 111
-1
votes
1
answer
50
views
why switchsniffer dose not work under win10 bits?
i have a switchsniffer and it was works normal under windows XP and works in Win32 with administration permissions but now in windows10 64 bits it dose not work at all , even i downloaded win pcap for ...
user1271716
1
vote
1
answer
253
views
How to capture wireless packets over Ethernet port along with Wired
I am trying to capture and analyze my network traffic. We have a wireless router and it have clients as both wired and wireless.
My Kali computer which is connected to the router over Ethernet port ...
- 11
0
votes
0
answers
888
views
No traffice on tun0 with wireshark/tcpdump
I'm connected to a testing lab via openvpn and it's obviously created a tun interface. As part of this assessment I am supposed to analyze traffic on that network, however when I open wireshark there ...
- 145
1
vote
1
answer
3k
views
Is it possible to increase the packet size while using tracert (for traceroute) in windows cmd?
I am looking to increasing the packet size while using the tracert (traceroute) command in Windows CMD.
But in the windows options, it does not give an option for increasing the packet size and uses ...
- 113
-1
votes
1
answer
400
views
How to capture packets at the "DSL side"? [closed]
https://osqa-ask.wireshark.org/questions/23522/capture-packets-from-my-broadband-modem
It is written here that capturing packets passing through the modem at DSL level, would only be possible with ...
- 9
0
votes
0
answers
503
views
improve TCPDUMP performance while capturing big amount of traffic
so I'm sending to some machine of mine ~2gbps of small packets (around 3.8 million packets per sec).
the machine have a tcpdump process that writes to a file running continuously without any filters.
...
- 1
1
vote
1
answer
2k
views
How do I capture packets between a WiFi router and an internet modem?
In my home all devices were connected to my router. I want to capture all traffic so I have done below connection:
Modem --- (Ethernet to USB Adapter) --> Laptop (Windows 10) --- (Ethernet CABLE) -...
- 111
0
votes
0
answers
887
views
No traffic captured in wireshark in monitor mode npcap
I am using npcap drivers (latest 0.9995) on windows 7. I can set the mode of my wireless card to monitor mode using wlanhelper "Wifi interface" mode monitor. It changes to mon mode ...
1
vote
1
answer
314
views
Openvpn L2/tap losing packets
[EDIT] This seems to be an OpenVPN bug - bridging with the server-side of the openvpn tap tunnel results in lost ARP packets, but bridging with the client side (of any client connected to the vpn) ...
- 470
2
votes
0
answers
342
views
How to intercept a flash game's network traffic that doesn't show up in chrome's developer tools
Go to fairgocasino.com in chrome and open any game (let's take for example the first slot in alphabetical order, "5 Wishes"). Open the network tab of developer tools with rightclick -> Inspect -> ...
- 131
0
votes
1
answer
204
views
What are the specific requirements for libpcap directional capture support?
I'm using libpcap on Linux to capture network traffic from a wireless adapter (2.4 GHz). The pcap_setdirection seems to allow you to setup the capture device so that it ignores traffic originating ...
- 192
-2
votes
1
answer
143
views
Finding windows computer hardware model from sniffing
Do any of you know a way to find out a computer specific model (eg: Lenovo ThinkPad e490, Dell XPS 13 9380) running windows os, passively, only by sniffing the data the computer sends and receives?
- 219
2
votes
1
answer
235
views
Can you capture/sniff traffic from LCOW?
Is it possible for a Linux container running on Windows (LCOW) to capture network traffic from the underlying Windows Container Host?
I.E. could tcpdump in the Linux container see the network traffic ...
-2
votes
1
answer
78
views
How can I sniff the traffic used to set options on the router?
I'm sorry if this ends up being a duplicate; I have read a number of similar questions on here, but none seems to quite fit what I'm asking.
My broadband provider, Vodafone, gives my the ability to '...
- 151
1
vote
0
answers
2k
views
Figuring out the direct stream url of an internet station
I enjoy listening to a station called Gone Up radio, but for some reason I can't access it with my Imperial i150 internet radio. It seems to be an aac stream, according to the sniffers I've tried (...
0
votes
0
answers
250
views
Capture full trace of HTTPS protocol in firefox/chrome
When I make a request in a browser like firefox or chrome, I would like to view a full trace of the HTTPS protocol, including the http version negotiation, the TLS negotiation, the headers, etc. The ...
- 101
0
votes
0
answers
282
views
ISP Blocking SNI Extension (Server Name Identifier) In Windows 10 But Not Server 2016
Out of curiosity I noticed my ISP (talktalk - UK) was able to block certain websites by the SNI Extention, however only from Windows 10. When attempting to access the same website from Server 2016, it ...
- 1
1
vote
2
answers
597
views
Wireshark : unable to catch network traffic to/from a device
I would like to use Wireshark to catch data to/from a device on my network.
I have a connected devices (all based on a ESP8266) which have trouble getting out the sleep mode (I think it's that). So I ...
- 11
0
votes
1
answer
162
views
Want to monitor 802.11mc Fine time measurement packets . Is there any packet sniffer that allows me to get all packets/frames from link layer?
I am doing a project with new fine time measurement capability introduced with 802.11mc (2016). I would like to monitor the frames for that.
Is it possible to get it using Wireshark or any other ...
0
votes
0
answers
40
views
Is my wireless adapter supported for monitoring?
Ive recently bought a https://www.amazon.co.uk/AC1200Mbps-Wireless-Antennas-802-11ac-MacOS10-5-14/dp/B07PQJYLDH/ref=sr_1_1?keywords=high+gain+dual+antenna&qid=1562166711&s=gateway&sr=8-1
...
0
votes
1
answer
129
views
Sniffing communications not working
I am looking for a VirtualBox guru. I tried several settings without success and I don't know what should I try further.
I have three virtual machines:
Two Windows 7 machines (master-slave ...
- 1
0
votes
1
answer
54
views
How can I view the traffic of this application?
I have a mobile app which connects to my cars wifi and reports data on it.
The app must be connected to the AP the car provides in order to work - I have tested whether the car connects to a public ...
- 175
0
votes
1
answer
226
views
Sniffing multiple ports of USB Hub simultaneously
I want to send data to an upstream port of a USB hub and read it through all downstream ports of the hub, each connected to a different device i.e broadcasting USB data. Basically to observe & ...
- 3
0
votes
1
answer
3k
views
sending packet with scapy custom ethernet header
Why sending packet with different ethernet source Mac address never reach target? Note: I used scapy sendp for sending the packet and I have my friends laptop up and connected to network?
3
votes
1
answer
859
views
Profibus or MODBUS over RS485
We are operating old systems which have many modules we are not able to find on the market. So we are looking for replacements. S7-200 PLC with several sensors is communicating over RS485 pair cable. ...
- 31
-1
votes
1
answer
59
views
Open website using IP, not domain
I wish to comment Loading a website using IP, but I can't because of reputation.
I have question because I don't understand process of opening website hosted with virtual hosting. When I write https:/...
- 21
0
votes
0
answers
135
views
How default Web Page is loaded with just TCP connection and no HTTP transaction?
Below is the packet capture from WireShark when a web request is made to the Google Server
172.217.26.228 is the IP address of the Google Server.
Filter that I am using is
(ip.dst == 172.217.26....
- 639
1
vote
1
answer
96
views
Sniffing data on a network
I have a couple of GoPro's connected to a Smart Remote device. I am able to connect to the hidden wifi access point created by the Smart Remote. I want to observe the communication between the GoPro's ...
- 227
2
votes
0
answers
494
views
How can I capture and analyse LTE packets using Wireshark and LTE modem? [closed]
Is it possible to analyse LTE packets using Wireshark. I'm having trouble using Wireshark to capture mobile LTE traffic. I ma using a MacBook and a LTE modem.
Do I need specific configuration to ...
- 121
0
votes
1
answer
73
views
Sniff ethernet communication
I have a setup in which I'm connected to a switch and there are 2 more devices there. Just protocol converters ... that have recently stopped working.
Since this equipment doesn't have any type of ...
- 123