Questions tagged [sniffing]

Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

Wireshark only decrypting MDNS, ARP, etc

I am playing with Wireshark. I am trying to view an HTTP request to http://example.com/?q=foobar that I made from a device on my Wi-Fi network. I inputted my SSID and WPA password to the 802.11 ...
user avatar
0 votes
0 answers
17 views

Unable to capture ICMP packets in wireshark

Ok I used yirsinia to launch a trunk port attack and right now the switch is recognizing my device as a trunk port. Except when I use wireshark to capture the packets from a different vlan (but right ...
user avatar
0 votes
0 answers
26 views

How do I capture non-local packets using WireShark on MacOS?

This is a pretty simple question. I'm trying to use WireShark to capture packets using my MacBook Pro 2019. Every time I run a capture on en0 (my Wi-Fi interface), all I am seeing is packets directed ...
user avatar
  • 121
0 votes
1 answer
25 views

Why do Bluetooth packet sniffing tutorials for Windows require an adapter?

My laptop can very clearly scan for and receive data from Bluetooth signals, yet every tutorial I've read online requires the use of an adapter. e.g. https://hackaday.com/2021/03/23/a-crash-course-on-...
user avatar
  • 1
3 votes
0 answers
40 views

Which driver is resuming my USB device?

I have a USB device that correctly enters in Suspend state, but it gets Resumed after a couple of seconds, then goes back to Suspend state and the loop continues. This happens on my notebook (Windows ...
user avatar
0 votes
0 answers
25 views

Wifi Monitor Mode bit rate (Data rate)

I want to transmit packets in monitor mode using 802.11b with payload data rate of 2 or 11 Mbps. According to the 802.11b documentation https://rfmw.em.keysight.com/wireless/helpfiles/89600b/webhelp/...
user avatar
0 votes
1 answer
234 views

Capturing management frames using Windows Network Monitor

I am trying to capture network traffic - specifically management frames (and from these, particularly beacon frames) in Windows. My wireless NIC is Intel Wifi AX201 160mhz, which seems to support ...
user avatar
  • 117
1 vote
1 answer
32 views

Start network capture as soon as interface is up

I'm trying to debug the network traffic that happens right when a USB RNDIS network adapter is plugged in. Right now I can use Wireshark to analyze the traffic after the USB has already been plugged ...
user avatar
  • 268
1 vote
1 answer
144 views

How raw sockets work?

Recently I developed a packet sniffer in python using socket module. In order to do that, I created a socket of type raw. Then I started receiving and parsing packets. My assumption was, by default, ...
user avatar
1 vote
0 answers
20 views

Capturing network traffic of a single Application/Tab

I often come across a situation where I have to analyze external communication of a Mobile or Desktop Application or even a paritcular tab of a browser. I sniff traffic usually with wireshark but at ...
user avatar
  • 111
0 votes
0 answers
26 views

how do DNS sniffers work?

If a DNS sniffer/spoofer like netwag/netwox is running on a network, how does the sniffer see the requests that are destined for the real DNS server? Wouldn't the packets for the DNS request be routed ...
user avatar
  • 1,139
0 votes
0 answers
26 views

Aggregate Packet Capture on Multiple L2 Switches with No RSPAN

Network Topology Reference I have multiple switches in my network topology to extend access in rooms, as there is only a single drop in any given room where wiring exists. The switches I have are ...
user avatar
  • 16
0 votes
0 answers
29 views

How to setup mac as a switch between two USB ethernet ports

Have to diagnose network packets to/from a hardware. I have two USB ethernet ports attached to the macbook. Also have Wireshark. But I dont know how to setup my mac network/route such that packets ...
user avatar
  • 351
0 votes
1 answer
570 views

How can I sniff all my router traffic with Wireshark?

I recently bought a WiFi adapter with Monitor mode (Alfa Network AWUS036NHA) and I want to sniff all my network traffic at my home. The goal is to detect some packets sent and received by my 'physical'...
user avatar
1 vote
0 answers
49 views

Sniffing with Wireshark Monitor mode not available

So I want to sniff WiFi traffic in my network (not the device wireshark is running on) while being connected so no decrypting with PSK. My WiFi card does support Monitor mode and Injections, however ...
user avatar
0 votes
1 answer
53 views

Wireshark in windows 10 not showing "80211" header for Link Layer Header column

I am trying to capture Wi-Fi frames and check few parameters of 802.11. For that, I was trying to set the Link Layer Header of Capture Options in the wire shark. The drop down of the Interface WiFi is ...
user avatar
  • 141
1 vote
1 answer
69 views

Retrieving MAC address via tunnel

Currently I'm working on adding my own software to provide internet support to an old MS-DOS game. Because my primary environment is Linux, I use DOSBOX from within Linux and feed my internet ...
user avatar
0 votes
1 answer
23 views

see DNS request hosts from any wireless networks(without knowing password)

I want to know hosts from DNS requests in any wireless network. Is it possible without knowing wifi passwords ? If yes, please list the steps.
user avatar
  • 111
-1 votes
1 answer
40 views

why switchsniffer dose not work under win10 bits?

i have a switchsniffer and it was works normal under windows XP and works in Win32 with administration permissions but now in windows10 64 bits it dose not work at all , even i downloaded win pcap for ...
user avatar
0 votes
1 answer
62 views

How to capture wireless packets over Ethernet port along with Wired

I am trying to capture and analyze my network traffic. We have a wireless router and it have clients as both wired and wireless. My Kali computer which is connected to the router over Ethernet port ...
user avatar
  • 1
0 votes
0 answers
343 views

No traffice on tun0 with wireshark/tcpdump

I'm connected to a testing lab via openvpn and it's obviously created a tun interface. As part of this assessment I am supposed to analyze traffic on that network, however when I open wireshark there ...
user avatar
  • 135
1 vote
1 answer
2k views

Is it possible to increase the packet size while using tracert (for traceroute) in windows cmd?

I am looking to increasing the packet size while using the tracert (traceroute) command in Windows CMD. But in the windows options, it does not give an option for increasing the packet size and uses ...
user avatar
-1 votes
1 answer
148 views

How to capture packets at the "DSL side"? [closed]

https://osqa-ask.wireshark.org/questions/23522/capture-packets-from-my-broadband-modem It is written here that capturing packets passing through the modem at DSL level, would only be possible with ...
user avatar
  • 9
0 votes
0 answers
301 views

improve TCPDUMP performance while capturing big amount of traffic

so I'm sending to some machine of mine ~2gbps of small packets (around 3.8 million packets per sec). the machine have a tcpdump process that writes to a file running continuously without any filters. ...
user avatar
1 vote
1 answer
949 views

How do I capture packets between a WiFi router and an internet modem?

In my home all devices were connected to my router. I want to capture all traffic so I have done below connection: Modem --- (Ethernet to USB Adapter) --> Laptop (Windows 10) --- (Ethernet CABLE) -...
user avatar
0 votes
0 answers
574 views

No traffic captured in wireshark in monitor mode npcap

I am using npcap drivers (latest 0.9995) on windows 7. I can set the mode of my wireless card to monitor mode using wlanhelper "Wifi interface" mode monitor. It changes to mon mode ...
user avatar
1 vote
1 answer
226 views

Openvpn L2/tap losing packets

[EDIT] This seems to be an OpenVPN bug - bridging with the server-side of the openvpn tap tunnel results in lost ARP packets, but bridging with the client side (of any client connected to the vpn) ...
user avatar
  • 430
2 votes
0 answers
175 views

How to intercept a flash game's network traffic that doesn't show up in chrome's developer tools

Go to fairgocasino.com in chrome and open any game (let's take for example the first slot in alphabetical order, "5 Wishes"). Open the network tab of developer tools with rightclick -> Inspect -> ...
user avatar
0 votes
1 answer
191 views

What are the specific requirements for libpcap directional capture support?

I'm using libpcap on Linux to capture network traffic from a wireless adapter (2.4 GHz). The pcap_setdirection seems to allow you to setup the capture device so that it ignores traffic originating ...
user avatar
  • 182
-2 votes
1 answer
141 views

Finding windows computer hardware model from sniffing

Do any of you know a way to find out a computer specific model (eg: Lenovo ThinkPad e490, Dell XPS 13 9380) running windows os, passively, only by sniffing the data the computer sends and receives?
user avatar
  • 219
2 votes
1 answer
201 views

Can you capture/sniff traffic from LCOW?

Is it possible for a Linux container running on Windows (LCOW) to capture network traffic from the underlying Windows Container Host? I.E. could tcpdump in the Linux container see the network traffic ...
user avatar
-2 votes
1 answer
71 views

How can I sniff the traffic used to set options on the router?

I'm sorry if this ends up being a duplicate; I have read a number of similar questions on here, but none seems to quite fit what I'm asking. My broadband provider, Vodafone, gives my the ability to '...
user avatar
1 vote
0 answers
998 views

Figuring out the direct stream url of an internet station

I enjoy listening to a station called Gone Up radio, but for some reason I can't access it with my Imperial i150 internet radio. It seems to be an aac stream, according to the sniffers I've tried (...
user avatar
0 votes
0 answers
155 views

Capture full trace of HTTPS protocol in firefox/chrome

When I make a request in a browser like firefox or chrome, I would like to view a full trace of the HTTPS protocol, including the http version negotiation, the TLS negotiation, the headers, etc. The ...
user avatar
  • 101
0 votes
0 answers
175 views

ISP Blocking SNI Extension (Server Name Identifier) In Windows 10 But Not Server 2016

Out of curiosity I noticed my ISP (talktalk - UK) was able to block certain websites by the SNI Extention, however only from Windows 10. When attempting to access the same website from Server 2016, it ...
user avatar
  • 1
1 vote
2 answers
160 views

Wireshark : unable to catch network traffic to/from a device

I would like to use Wireshark to catch data to/from a device on my network. I have a connected devices (all based on a ESP8266) which have trouble getting out the sleep mode (I think it's that). So I ...
user avatar
  • 11
0 votes
1 answer
123 views

Want to monitor 802.11mc Fine time measurement packets . Is there any packet sniffer that allows me to get all packets/frames from link layer?

I am doing a project with new fine time measurement capability introduced with 802.11mc (2016). I would like to monitor the frames for that. Is it possible to get it using Wireshark or any other ...
user avatar
0 votes
0 answers
36 views

Is my wireless adapter supported for monitoring?

Ive recently bought a https://www.amazon.co.uk/AC1200Mbps-Wireless-Antennas-802-11ac-MacOS10-5-14/dp/B07PQJYLDH/ref=sr_1_1?keywords=high+gain+dual+antenna&qid=1562166711&s=gateway&sr=8-1 ...
user avatar
0 votes
1 answer
95 views

Sniffing communications not working

I am looking for a VirtualBox guru. I tried several settings without success and I don't know what should I try further. I have three virtual machines: Two Windows 7 machines (master-slave ...
user avatar
  • 1
0 votes
1 answer
45 views

How can I view the traffic of this application?

I have a mobile app which connects to my cars wifi and reports data on it. The app must be connected to the AP the car provides in order to work - I have tested whether the car connects to a public ...
user avatar
0 votes
1 answer
114 views

Sniffing multiple ports of USB Hub simultaneously

I want to send data to an upstream port of a USB hub and read it through all downstream ports of the hub, each connected to a different device i.e broadcasting USB data. Basically to observe & ...
user avatar
  • 3
0 votes
1 answer
942 views

sending packet with scapy custom ethernet header

Why sending packet with different ethernet source Mac address never reach target? Note: I used scapy sendp for sending the packet and I have my friends laptop up and connected to network?
user avatar
3 votes
1 answer
488 views

Profibus or MODBUS over RS485

We are operating old systems which have many modules we are not able to find on the market. So we are looking for replacements. S7-200 PLC with several sensors is communicating over RS485 pair cable. ...
user avatar
  • 31
-1 votes
1 answer
52 views

Open website using IP, not domain

I wish to comment Loading a website using IP, but I can't because of reputation. I have question because I don't understand process of opening website hosted with virtual hosting. When I write https:/...
user avatar
0 votes
0 answers
90 views

How default Web Page is loaded with just TCP connection and no HTTP transaction?

Below is the packet capture from WireShark when a web request is made to the Google Server 172.217.26.228 is the IP address of the Google Server. Filter that I am using is (ip.dst == 172.217.26....
user avatar
  • 639
1 vote
1 answer
91 views

Sniffing data on a network

I have a couple of GoPro's connected to a Smart Remote device. I am able to connect to the hidden wifi access point created by the Smart Remote. I want to observe the communication between the GoPro's ...
user avatar
  • 227
2 votes
0 answers
411 views

How can I capture and analyse LTE packets using Wireshark and LTE modem? [closed]

Is it possible to analyse LTE packets using Wireshark. I'm having trouble using Wireshark to capture mobile LTE traffic. I ma using a MacBook and a LTE modem. Do I need specific configuration to ...
user avatar
  • 121
0 votes
1 answer
55 views

Sniff ethernet communication

I have a setup in which I'm connected to a switch and there are 2 more devices there. Just protocol converters ... that have recently stopped working. Since this equipment doesn't have any type of ...
user avatar
  • 123
0 votes
1 answer
1k views

How to force Linux bridge to output frame on multiple interfaces?

I have a Linksys E2500 router running Tomato v1.28 (Linux kernel 2.6.22.19, no USB drive capability) that is functioning in bridge mode to connect three interfaces: root@TomatoE2500Host:/# brctl show ...
user avatar
0 votes
0 answers
101 views

Iptables rules seem to be missing packets?

On my home network (192.168.1.0/24), I am trying to use iptables to silently clone all wifi TCP/UDP traffic to/from my Xbox One to my Windows 10 desktop, for packet sniffing via Wireshark. Due to ...
user avatar

1
2 3 4 5 6