Skip to main content

Questions tagged [sniffing]

Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

Filter by
Sorted by
Tagged with
0 votes
0 answers
41 views

How to inspect HTTPS packets on my network?

I'd like to be able to inspect HTTPS traffic on my personal LAN to see what some closed source applications may be sending back to home base. I've heard that one viable way is to "man in the ...
tuskiomi's user avatar
  • 853
0 votes
0 answers
30 views

Security Onion VM not picking up traffic from mirrored port

I have the following set up: my PC is connected to two ports on the Netgear switch (2 and 7) via two NICs, and the switch is configured to mirror ports 3 & 4 to port 7. A Security Onion VM on ...
user2850751's user avatar
1 vote
0 answers
93 views

How can I sniff a USB connection between a PC and a Thermal printer?

I need to develop a hardware and software solution to intercept the communications between a PC - Thermal receipt printer. The protocol between these two is USB, but i don't have any idea of where to ...
frandev's user avatar
  • 11
0 votes
1 answer
51 views

How to capture packets with different snaplen for different packets

I'm trying to capture packets to diagnose a network application. There are a small number of packets that I want to capture the entire contents for application level protocol analysis, but a large ...
Evan's user avatar
  • 103
0 votes
0 answers
293 views

How to capture packets at the Ethernet layer on a SOCKS5 proxy server?

When I capture packets with tcpdump on an Ubuntu 20.04 VM running a SOCKS proxy server on port 1080, they are often larger than 1500 bytes. My network device has an MTU of 1500, so as far as I ...
try0S's user avatar
  • 1
0 votes
1 answer
72 views

Is routing local Wi-Fi traffic through a local wired VPN device any more secure?

I have several devices on a private local network - some wired (e.g PCs, laptops, SBCs) and some wireless (mobiles, tablets). I have a Raspberry Pi on the same network, connected via Ethernet only, ...
jimjamz's user avatar
  • 35
4 votes
3 answers
1k views

Does DNS-over-HTTPS hide domain name of websites from packet analyzers?

A person on my same Wifi network is tracking name of the websites that I visit using tools like Wireshark. Does DNS over HTTPS hide the name of the sites that I visit? My DNS settings are - DNS ...
Gopal S's user avatar
  • 45
0 votes
0 answers
612 views

ESP32 DNS tunneling : how to intercept/forward traffic (promiscuous VS httpd VS l2TAP)

Context I'm often abroad for both work and vacation, and I find myself in situations where internet access is limited or unavailable in many of the countries I visit. While there are often free WiFi ...
jonathan's user avatar
5 votes
1 answer
18k views

curl: (35) schannel: next InitializeSecurityContext failed - The revocation function was unable to check revocation for the certificate

tl;dr How can I fix "The revocation function was unable to check revocation for the certificate" when using a custom proxy+cert combination? Can I disable this check somehow for the whole ...
ctote's user avatar
  • 409
1 vote
1 answer
98 views

Debugging internet connectivity delay issue

Problem For quite some time now, I am experiencing hiccups in my network connection, although the speeds are on par with what ISP offers (tested with https://speed.cloudflare.com/). Specifically, when ...
Alexandru Dinu's user avatar
0 votes
0 answers
139 views

Cannot see HTTP when using Wireshark on two different models of Alfa Wi-Fi adapters

I just upgraded my Wi-Fi adapter from Alfa AWUS036ACS to the Alfa AWUS036ACM and I can tell it's much better. However, I am still not getting the desired results in Wireshark which leads me to believe ...
Lin's user avatar
  • 25
1 vote
1 answer
763 views

How does 802.11a,b,g,n,ac and channel factor into sniffing with wireshark?

I have been playing around with wireshark lately and am wondering how your 802.11 version as well as channel impact packet capture? If my router uses 802.11a,g,n and ac and my wifi adapter uses 802....
Lin's user avatar
  • 25
0 votes
1 answer
92 views

Will this adapter work with wireshark?

Will the Alfa awus036acm with mt7612u chipset work with wireshark 6.0.2 on Kali 6.0.0 for packet sniffing tcp,udp,dns,http,etc? I have seen both negative and positive reviews on it so I'm not sure.
Lin's user avatar
  • 25
0 votes
0 answers
454 views

Why is Wireshark not showing any TCP, UDP, DNS or HTTP traffic?

I'm using Wireshark 4.0.2 on Kali 6.0.0 with an Alfa AWUS036ACS and in managed mode with promiscuous mode enabled I don't see any TCP, UDP, DNS or HTTP. If I switch to monitor mode with promiscuous ...
Lin's user avatar
  • 25
0 votes
1 answer
296 views

Logging network traffic of a specific app in Linux inside docker, stopping it from reaching the internet and spoofing responses

I have an app (Google's Android Emulator running via QEMU) running on Ubuntu inside a docker instance. I want to: Capture all network traffic (packets) comming from a VM running inside QEMU. Prevent ...
Dex's user avatar
  • 11
0 votes
1 answer
277 views

Enabling a diverter in fakenet-ng on Ubuntu Linux disables all network traffic

I am trying to capture network traffic from within a docker container running Ubuntu. I am using Flare's Fakenet-ng for this, as I didn't find any better tool suited for the job (capturing network ...
Dex's user avatar
  • 11
1 vote
1 answer
1k views

How to use ciscodump?

In wireshark, there is this option called Cisco remote capture: ciscodump, which, from my understanding, should enable to do a tcpdump on a cisco router (for example) via SSH and get back the results ...
user1741932's user avatar
1 vote
0 answers
385 views

How do I capture non-local packets using WireShark on MacOS?

This is a pretty simple question. I'm trying to use WireShark to capture packets using my MacBook Pro 2019. Every time I run a capture on en0 (my Wi-Fi interface), all I am seeing is packets directed ...
Ben Zelnick's user avatar
1 vote
1 answer
1k views

Why do Bluetooth packet sniffing tutorials for Windows require an adapter?

My laptop can very clearly scan for and receive data from Bluetooth signals, yet every tutorial I've read online requires the use of an adapter. e.g. https://hackaday.com/2021/03/23/a-crash-course-on-...
Kees's user avatar
  • 11
3 votes
0 answers
54 views

Which driver is resuming my USB device?

I have a USB device that correctly enters in Suspend state, but it gets Resumed after a couple of seconds, then goes back to Suspend state and the loop continues. This happens on my notebook (Windows ...
TheUnexpected's user avatar
0 votes
1 answer
2k views

Capturing management frames using Windows Network Monitor

I am trying to capture network traffic - specifically management frames (and from these, particularly beacon frames) in Windows. My wireless NIC is Intel Wifi AX201 160mhz, which seems to support ...
Veverke's user avatar
  • 187
1 vote
1 answer
390 views

Start network capture as soon as interface is up

I'm trying to debug the network traffic that happens right when a USB RNDIS network adapter is plugged in. Right now I can use Wireshark to analyze the traffic after the USB has already been plugged ...
Rick's user avatar
  • 284
1 vote
1 answer
2k views

How raw sockets work?

Recently I developed a packet sniffer in python using socket module. In order to do that, I created a socket of type raw. Then I started receiving and parsing packets. My assumption was, by default, ...
Ssaf's user avatar
  • 25
1 vote
0 answers
127 views

Capturing network traffic of a single Application/Tab

I often come across a situation where I have to analyze external communication of a Mobile or Desktop Application or even a paritcular tab of a browser. I sniff traffic usually with wireshark but at ...
aneela's user avatar
  • 111
2 votes
1 answer
11k views

How can I sniff all my router traffic with Wireshark?

I recently bought a WiFi adapter with Monitor mode (Alfa Network AWUS036NHA) and I want to sniff all my network traffic at my home. The goal is to detect some packets sent and received by my 'physical'...
Gwynbleidd's user avatar
1 vote
0 answers
1k views

Sniffing with Wireshark Monitor mode not available

So I want to sniff WiFi traffic in my network (not the device wireshark is running on) while being connected so no decrypting with PSK. My WiFi card does support Monitor mode and Injections, however ...
Christopher's user avatar
0 votes
1 answer
637 views

Wireshark in windows 10 not showing "80211" header for Link Layer Header column

I am trying to capture Wi-Fi frames and check few parameters of 802.11. For that, I was trying to set the Link Layer Header of Capture Options in the wire shark. The drop down of the Interface WiFi is ...
Franc's user avatar
  • 141
1 vote
1 answer
613 views

Retrieving MAC address via tunnel

Currently I'm working on adding my own software to provide internet support to an old MS-DOS game. Because my primary environment is Linux, I use DOSBOX from within Linux and feed my internet ...
user avatar
0 votes
1 answer
78 views

see DNS request hosts from any wireless networks(without knowing password)

I want to know hosts from DNS requests in any wireless network. Is it possible without knowing wifi passwords ? If yes, please list the steps.
rainyday's user avatar
  • 111
-1 votes
1 answer
58 views

why switchsniffer dose not work under win10 bits?

i have a switchsniffer and it was works normal under windows XP and works in Win32 with administration permissions but now in windows10 64 bits it dose not work at all , even i downloaded win pcap for ...
user avatar
1 vote
1 answer
681 views

How to capture wireless packets over Ethernet port along with Wired

I am trying to capture and analyze my network traffic. We have a wireless router and it have clients as both wired and wireless. My Kali computer which is connected to the router over Ethernet port ...
NaniK's user avatar
  • 11
0 votes
0 answers
2k views

No traffice on tun0 with wireshark/tcpdump

I'm connected to a testing lab via openvpn and it's obviously created a tun interface. As part of this assessment I am supposed to analyze traffic on that network, however when I open wireshark there ...
BitShift's user avatar
  • 145
1 vote
1 answer
4k views

Is it possible to increase the packet size while using tracert (for traceroute) in windows cmd?

I am looking to increasing the packet size while using the tracert (traceroute) command in Windows CMD. But in the windows options, it does not give an option for increasing the packet size and uses ...
Anirudh Ganesh's user avatar
-1 votes
1 answer
591 views

How to capture packets at the "DSL side"? [closed]

https://osqa-ask.wireshark.org/questions/23522/capture-packets-from-my-broadband-modem It is written here that capturing packets passing through the modem at DSL level, would only be possible with ...
Tao's user avatar
  • 9
0 votes
0 answers
844 views

improve TCPDUMP performance while capturing big amount of traffic

so I'm sending to some machine of mine ~2gbps of small packets (around 3.8 million packets per sec). the machine have a tcpdump process that writes to a file running continuously without any filters. ...
yogev123's user avatar
1 vote
1 answer
2k views

How do I capture packets between a WiFi router and an internet modem?

In my home all devices were connected to my router. I want to capture all traffic so I have done below connection: Modem --- (Ethernet to USB Adapter) --> Laptop (Windows 10) --- (Ethernet CABLE) -...
Siddhpura Amit's user avatar
0 votes
0 answers
1k views

No traffic captured in wireshark in monitor mode npcap

I am using npcap drivers (latest 0.9995) on windows 7. I can set the mode of my wireless card to monitor mode using wlanhelper "Wifi interface" mode monitor. It changes to mon mode ...
ratcher86's user avatar
1 vote
1 answer
433 views

Openvpn L2/tap losing packets

[EDIT] This seems to be an OpenVPN bug - bridging with the server-side of the openvpn tap tunnel results in lost ARP packets, but bridging with the client side (of any client connected to the vpn) ...
regulatre's user avatar
  • 470
2 votes
0 answers
436 views

How to intercept a flash game's network traffic that doesn't show up in chrome's developer tools

Go to fairgocasino.com in chrome and open any game (let's take for example the first slot in alphabetical order, "5 Wishes"). Open the network tab of developer tools with rightclick -> Inspect -> ...
Jonathan Ray's user avatar
0 votes
1 answer
242 views

What are the specific requirements for libpcap directional capture support?

I'm using libpcap on Linux to capture network traffic from a wireless adapter (2.4 GHz). The pcap_setdirection seems to allow you to setup the capture device so that it ignores traffic originating ...
user's user avatar
  • 212
-2 votes
1 answer
146 views

Finding windows computer hardware model from sniffing

Do any of you know a way to find out a computer specific model (eg: Lenovo ThinkPad e490, Dell XPS 13 9380) running windows os, passively, only by sniffing the data the computer sends and receives?
Golden's user avatar
  • 219
2 votes
1 answer
268 views

Can you capture/sniff traffic from LCOW?

Is it possible for a Linux container running on Windows (LCOW) to capture network traffic from the underlying Windows Container Host? I.E. could tcpdump in the Linux container see the network traffic ...
Neal Eastwood's user avatar
-2 votes
1 answer
84 views

How can I sniff the traffic used to set options on the router?

I'm sorry if this ends up being a duplicate; I have read a number of similar questions on here, but none seems to quite fit what I'm asking. My broadband provider, Vodafone, gives my the ability to '...
John Gowers's user avatar
1 vote
0 answers
3k views

Figuring out the direct stream url of an internet station

I enjoy listening to a station called Gone Up radio, but for some reason I can't access it with my Imperial i150 internet radio. It seems to be an aac stream, according to the sniffers I've tried (...
Christina Maria's user avatar
1 vote
0 answers
487 views

Capture full trace of HTTPS protocol in firefox/chrome

When I make a request in a browser like firefox or chrome, I would like to view a full trace of the HTTPS protocol, including the http version negotiation, the TLS negotiation, the headers, etc. The ...
Lasse's user avatar
  • 111
0 votes
0 answers
392 views

ISP Blocking SNI Extension (Server Name Identifier) In Windows 10 But Not Server 2016

Out of curiosity I noticed my ISP (talktalk - UK) was able to block certain websites by the SNI Extention, however only from Windows 10. When attempting to access the same website from Server 2016, it ...
Henry's user avatar
  • 1
2 votes
2 answers
2k views

Wireshark : unable to catch network traffic to/from a device

I would like to use Wireshark to catch data to/from a device on my network. I have a connected devices (all based on a ESP8266) which have trouble getting out the sleep mode (I think it's that). So I ...
GoblE's user avatar
  • 21
0 votes
1 answer
236 views

Want to monitor 802.11mc Fine time measurement packets . Is there any packet sniffer that allows me to get all packets/frames from link layer?

I am doing a project with new fine time measurement capability introduced with 802.11mc (2016). I would like to monitor the frames for that. Is it possible to get it using Wireshark or any other ...
Amarnath R Shenoy's user avatar
0 votes
0 answers
43 views

Is my wireless adapter supported for monitoring?

Ive recently bought a https://www.amazon.co.uk/AC1200Mbps-Wireless-Antennas-802-11ac-MacOS10-5-14/dp/B07PQJYLDH/ref=sr_1_1?keywords=high+gain+dual+antenna&qid=1562166711&s=gateway&sr=8-1 ...
Jonathan Smith's user avatar
0 votes
1 answer
179 views

Sniffing communications not working

I am looking for a VirtualBox guru. I tried several settings without success and I don't know what should I try further. I have three virtual machines: Two Windows 7 machines (master-slave ...
Lukas's user avatar
  • 1

1
2 3 4 5 6