Questions tagged [sniffing]

Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

Filter by
Sorted by
Tagged with
0
votes
1answer
9 views

Wireshark in windows 10 not showing “80211” header for Link Layer Header column

I am trying to capture Wi-Fi frames and check few parameters of 802.11. For that, I was trying to set the Link Layer Header of Capture Options in the wire shark. The drop down of the Interface WiFi is ...
1
vote
1answer
8 views

Retrieving MAC address via tunnel

Currently I'm working on adding my own software to provide internet support to an old MS-DOS game. Because my primary environment is Linux, I use DOSBOX from within Linux and feed my internet ...
0
votes
0answers
27 views

Triggering An Event on Local Network on Any Communication to Specific Local IP & Port

Hoping someone with a bit more knowledge on networking can help me here, I'm not quite sure how to start approaching this problem. Abstract Problem: I'm interested in listening on my local network for ...
0
votes
0answers
33 views

Why does Wireshark Wi-Fi capture contain only Packets to STA. Packets from STA are missing (Chipset ralink 5370 under RaspOS)

I looked already round here. I know already Post Wireshark only captures packets to or from this device. It does not answer my question. My goal is to prepare a capture system for analyzing roaming ...
0
votes
0answers
10 views

How to capture or view SMTP and other non HTTP traffic in proxy application?

I am using mitmproxy. I want to view all traffic to and from my machine. Default proxy setting allows to see only HTTP traffic.
0
votes
0answers
13 views

Is there an easy way to check if a pcap is corrupt on Linux?

I need to check whether any pcaps in a certain collection are corrupt. I could try opening up each one individually in Wireshark, but that seems like a very inefficient solution. Is there was some ...
0
votes
1answer
21 views

see DNS request hosts from any wireless networks(without knowing password)

I want to know hosts from DNS requests in any wireless network. Is it possible without knowing wifi passwords ? If yes, please list the steps.
0
votes
0answers
13 views

how can i capture wifi packets of a specific AP? i need to see the packets rssi

I need to catch packets of a specific AP in my range and display the rssi of this packets. I tried to use "airodump−ng −−bssid $1 −−write capture. pcap wlan0mon" and then analyze it with ...
-1
votes
1answer
38 views

why switchsniffer dose not work under win10 bits?

i have a switchsniffer and it was works normal under windows XP and works in Win32 with administration permissions but now in windows10 64 bits it dose not work at all , even i downloaded win pcap for ...
0
votes
1answer
47 views

How to capture wireless packets over Ethernet port along with Wired

I am trying to capture and analyze my network traffic. We have a wireless router and it have clients as both wired and wireless. My Kali computer which is connected to the router over Ethernet port ...
0
votes
0answers
59 views

No traffice on tun0 with wireshark/tcpdump

I'm connected to a testing lab via openvpn and it's obviously created a tun interface. As part of this assessment I am supposed to analyze traffic on that network, however when I open wireshark there ...
1
vote
1answer
255 views

Is it possible to increase the packet size while using tracert (for traceroute) in windows cmd?

I am looking to increasing the packet size while using the tracert (traceroute) command in Windows CMD. But in the windows options, it does not give an option for increasing the packet size and uses ...
-1
votes
1answer
50 views

How to capture packets at the “DSL side”? [closed]

https://osqa-ask.wireshark.org/questions/23522/capture-packets-from-my-broadband-modem It is written here that capturing packets passing through the modem at DSL level, would only be possible with ...
0
votes
0answers
112 views

improve TCPDUMP performance while capturing big amount of traffic

so I'm sending to some machine of mine ~2gbps of small packets (around 3.8 million packets per sec). the machine have a tcpdump process that writes to a file running continuously without any filters. ...
0
votes
0answers
7 views

Automating handshake capture to decrypt 802.11 frames [duplicate]

networking newbie here. I am running some experiments on IoT devices for which I need to capture the handshakes of the devices on my network in order to decrypt the frames I obtain through monitor ...
0
votes
0answers
24 views

Using pre-captured handshake to decrypt 802.11 frames

networking newbie here. I am running some experiments on IoT devices for which I need to capture the handshakes of the devices on my network in order to decrypt the frames I obtain through monitor ...
0
votes
0answers
27 views

Allow NIC card to accept unknown multicast frames in Windows 10

I want to sniff multicast frames between two devices. So I brought a tiny hub and connected the link that I want to sniff in two ports and to the third port a cable from my NIC card. I can see all the ...
1
vote
1answer
531 views

How do I capture packets between a WiFi router and an internet modem?

In my home all devices were connected to my router. I want to capture all traffic so I have done below connection: Modem --- (Ethernet to USB Adapter) --> Laptop (Windows 10) --- (Ethernet CABLE) -...
0
votes
0answers
381 views

No traffic captured in wireshark in monitor mode npcap

I am using npcap drivers (latest 0.9995) on windows 7. I can set the mode of my wireless card to monitor mode using wlanhelper "Wifi interface" mode monitor. It changes to mon mode ...
1
vote
1answer
135 views

Openvpn L2/tap losing packets

[EDIT] This seems to be an OpenVPN bug - bridging with the server-side of the openvpn tap tunnel results in lost ARP packets, but bridging with the client side (of any client connected to the vpn) ...
0
votes
0answers
26 views

Sniffing out the 802.11 protocol version supported(b/g/n)

Is there a way to find out if the Wi-Fi network is running in b/g/n, g/n on n only mode by passive sniffing? Most of the information I have found so far can be seen in this table. However, when I ...
1
vote
0answers
128 views

How to intercept a flash game's network traffic that doesn't show up in chrome's developer tools

Go to fairgocasino.com in chrome and open any game (let's take for example the first slot in alphabetical order, "5 Wishes"). Open the network tab of developer tools with rightclick -> Inspect -> ...
0
votes
1answer
181 views

What are the specific requirements for libpcap directional capture support?

I'm using libpcap on Linux to capture network traffic from a wireless adapter (2.4 GHz). The pcap_setdirection seems to allow you to setup the capture device so that it ignores traffic originating ...
-2
votes
1answer
140 views

Finding windows computer hardware model from sniffing

Do any of you know a way to find out a computer specific model (eg: Lenovo ThinkPad e490, Dell XPS 13 9380) running windows os, passively, only by sniffing the data the computer sends and receives?
2
votes
1answer
156 views

Can you capture/sniff traffic from LCOW?

Is it possible for a Linux container running on Windows (LCOW) to capture network traffic from the underlying Windows Container Host? I.E. could tcpdump in the Linux container see the network traffic ...
-2
votes
1answer
65 views

How can I sniff the traffic used to set options on the router?

I'm sorry if this ends up being a duplicate; I have read a number of similar questions on here, but none seems to quite fit what I'm asking. My broadband provider, Vodafone, gives my the ability to '...
1
vote
0answers
448 views

Figuring out the direct stream url of an internet station

I enjoy listening to a station called Gone Up radio, but for some reason I can't access it with my Imperial i150 internet radio. It seems to be an aac stream, according to the sniffers I've tried (...
0
votes
0answers
74 views

Capture full trace of HTTPS protocol in firefox/chrome

When I make a request in a browser like firefox or chrome, I would like to view a full trace of the HTTPS protocol, including the http version negotiation, the TLS negotiation, the headers, etc. The ...
0
votes
0answers
116 views

ISP Blocking SNI Extension (Server Name Identifier) In Windows 10 But Not Server 2016

Out of curiosity I noticed my ISP (talktalk - UK) was able to block certain websites by the SNI Extention, however only from Windows 10. When attempting to access the same website from Server 2016, it ...
1
vote
2answers
120 views

Wireshark : unable to catch network traffic to/from a device

I would like to use Wireshark to catch data to/from a device on my network. I have a connected devices (all based on a ESP8266) which have trouble getting out the sleep mode (I think it's that). So I ...
0
votes
1answer
81 views

Want to monitor 802.11mc Fine time measurement packets . Is there any packet sniffer that allows me to get all packets/frames from link layer?

I am doing a project with new fine time measurement capability introduced with 802.11mc (2016). I would like to monitor the frames for that. Is it possible to get it using Wireshark or any other ...
0
votes
0answers
33 views

Is my wireless adapter supported for monitoring?

Ive recently bought a https://www.amazon.co.uk/AC1200Mbps-Wireless-Antennas-802-11ac-MacOS10-5-14/dp/B07PQJYLDH/ref=sr_1_1?keywords=high+gain+dual+antenna&qid=1562166711&s=gateway&sr=8-1 ...
0
votes
1answer
83 views

Sniffing communications not working

I am looking for a VirtualBox guru. I tried several settings without success and I don't know what should I try further. I have three virtual machines: Two Windows 7 machines (master-slave ...
0
votes
1answer
39 views

How can I view the traffic of this application?

I have a mobile app which connects to my cars wifi and reports data on it. The app must be connected to the AP the car provides in order to work - I have tested whether the car connects to a public ...
0
votes
1answer
72 views

Sniffing multiple ports of USB Hub simultaneously

I want to send data to an upstream port of a USB hub and read it through all downstream ports of the hub, each connected to a different device i.e broadcasting USB data. Basically to observe & ...
0
votes
1answer
619 views

sending packet with scapy custom ethernet header

Why sending packet with different ethernet source Mac address never reach target? Note: I used scapy sendp for sending the packet and I have my friends laptop up and connected to network?
3
votes
1answer
358 views

Profibus or MODBUS over RS485

We are operating old systems which have many modules we are not able to find on the market. So we are looking for replacements. S7-200 PLC with several sensors is communicating over RS485 pair cable. ...
-1
votes
1answer
51 views

Open website using IP, not domain

I wish to comment Loading a website using IP, but I can't because of reputation. I have question because I don't understand process of opening website hosted with virtual hosting. When I write https:/...
0
votes
0answers
67 views

How default Web Page is loaded with just TCP connection and no HTTP transaction?

Below is the packet capture from WireShark when a web request is made to the Google Server 172.217.26.228 is the IP address of the Google Server. Filter that I am using is (ip.dst == 172.217.26....
1
vote
1answer
84 views

Sniffing data on a network

I have a couple of GoPro's connected to a Smart Remote device. I am able to connect to the hidden wifi access point created by the Smart Remote. I want to observe the communication between the GoPro's ...
2
votes
0answers
378 views

How can I capture and analyse LTE packets using Wireshark and LTE modem? [closed]

Is it possible to analyse LTE packets using Wireshark. I'm having trouble using Wireshark to capture mobile LTE traffic. I ma using a MacBook and a LTE modem. Do I need specific configuration to ...
0
votes
1answer
48 views

Sniff ethernet communication

I have a setup in which I'm connected to a switch and there are 2 more devices there. Just protocol converters ... that have recently stopped working. Since this equipment doesn't have any type of ...
0
votes
1answer
1k views

How to force Linux bridge to output frame on multiple interfaces?

I have a Linksys E2500 router running Tomato v1.28 (Linux kernel 2.6.22.19, no USB drive capability) that is functioning in bridge mode to connect three interfaces: root@TomatoE2500Host:/# brctl show ...
0
votes
0answers
63 views

Iptables rules seem to be missing packets?

On my home network (192.168.1.0/24), I am trying to use iptables to silently clone all wifi TCP/UDP traffic to/from my Xbox One to my Windows 10 desktop, for packet sniffing via Wireshark. Due to ...
0
votes
1answer
138 views

tcpdump: (all BPF devices are busy) - How to solve this

I was running tcpdump and then after some time I got this error: tcpdump: (all BPF devices are busy) I am not sure why? I killed all tcpdump processes, in case that this had something to do with it, ...
0
votes
2answers
262 views

How to make Wireshark show http format instead of 802.11 or check if Wireshark is capturing it

First of all, this might look like a duplicate from this post, and it kind of is, but at the time writing my rep is not high enough to comment and I was walking in to some issues whilst applying that ...
0
votes
1answer
138 views

can I sniff traffic with NIC connected to network and without having IP address

Is it possible to sniff network traffic by just connecting to network but without assigning IP address to NIC? If sniffing is not possible, how easy is to guess get valid IP address if DHCP is ...
0
votes
1answer
290 views

tshark: using frame contains and write to file

i want to filter out TCP packets that contain a specific string in the frame data (data.data) tshark -i 1 -f "tcp port 8800" -Y "frame contains FILE" -w "data.txt" This is exactly what i want. ...
0
votes
0answers
425 views

trying to enable monitor mode in Raspbian

I followed this tutorial in order to enable monitor mode in my Raspberry Pi 3, when I get to the step where I have to create the monitor interface, I've got the following error: iw phy iw dev wlan0 ...
1
vote
1answer
743 views

TcpDump capture stops after few minutes. (Windows)

I'm trying to capture all my networking with tcpdump. I'm using tcpdump.exe -i {} -W 5 -C 10 -w capfile. After 10 mints (+-) the capture stopped for some reason, and tcpdump is still running. Maybe ...

1
2 3 4 5 6