The packet-analyzer tag has no wiki summary.
1
vote
1answer
100 views
What is the best way/tool to analyze raw data(network stats) from Simulation?
After running a simulation(using a simulator(QualNet)) of a simulated network I end up with ip stats stored in a database, I then extract the data to a csv file
So now I have 750mb of raw network ...
0
votes
1answer
89 views
Tools for Graphing raw data capture file(txt file) [closed]
I extracted data(trace files) from a SQL database that contains raw data capture stats from a simulation(network). What IP network performance metrics can I derive from the information I am ...
1
vote
0answers
76 views
How to add TDS support to tshark?
How to add TDS (knowledge about MS SQL Server packets' structure) support for tshark?
Currently, the situation is this:
root@DEV:/# tshark -d . 2>&1| grep -i tds
root@DEV:/#
I.e: tshark does not ...
4
votes
4answers
991 views
How to list all requests to udp sockets?
I'm operating a couple of server daemons that use udp to communicate with large number of clients. How do I find and list out all the active udp "connections" that are talking to the servers in order ...
0
votes
1answer
119 views
Using tshark to generate traffic logs every X seconds
I'm trying to use tshark to maintain a running history of all the packets that are going through an interface, for say 30 seconds. I want it to be human readable.
This is a linux machine, and without ...
1
vote
1answer
174 views
What's a good proxy/tool to dynamically change the content of packets(TCP/UDP)
I am not sure if such tool exists, but I want to dynamically modify certain packets sent using my wireless network. More specifically, I want to modify packets sent from multiple machines (including ...
4
votes
2answers
3k views
Can 3G networks be packet sniffed / analyzed?
Just wondering if 3G networks can be sniffed like public wifi networks, via wireshark for example (I'm almost sure this is not possible due to encryption, but I just want to make sure?)
3
votes
2answers
817 views
Silently start Wireshark
I have a computer in our office that always gets infected by viruses. Because of this, I would like to use Wireshark (or at least something) to monitor internet traffic for a while on this machine. ...
0
votes
1answer
154 views
How can I read a packet capture file from a Cisco RV 120W?
What program should I use?
(the file is generated on RV 120W under Diagnostics section)
4
votes
2answers
2k views
GUI tool for packet replay [closed]
Is there a freeware Windows/Linux GUI packet replay tool that has the advanced features of tcpreplay (http://tcpreplay.synfin.net/) or bittwist (http://bittwist.sourceforge.net)? I'm particularly ...
2
votes
1answer
172 views
Confusion about TCP packet analysis terms
I'm analyzing our network and have some confusion about the terms:
this is the 2-packet output from source to destination.
from these i have to get some features as describe, pls make me clear...
...
2
votes
1answer
183 views
Tool for graphing packet size distribution on Linux?
Is there a tool for Linux to easily produce graphs (histograms) of the packet sizes (e.g. TCP) of network traffic ?
(before I start putting together something using e.g. matplotlib and python ...
4
votes
4answers
2k views
Monitor number of bytes transferred to/from IP address on port
Can anyone recommend a linux command line tool to monitor the number of bytes transferred between the local server and a specified IP address/port.
The equivalent tcpdump command would be:
tcpdump ...
5
votes
2answers
5k views
How can I search the info column in WireShark?
WireShark | Windows
I want to search a packet capture of SMTP traffic for specific addresses/messages. Normally, I just sort the info column and browse but it would be nice if I could just run a ...
1
vote
1answer
585 views
Transparent Bridge on Windows XP
Bascially i need to set up a configuration like the following:
http://wiki.wireshark.org/CaptureSetup/Ethernet#Capture_using_a_machine-in-the-middle
I have a computer with windows XP and 2 nics. I ...
0
votes
2answers
225 views
Identifying VoIP Users
I'm looking for a way to identify as many consumer VoIP users on my ISP network as possible using packet analysis.
My setup is like this:
On my core switch, all traffic going in and out of gigabit1 ...
1
vote
2answers
369 views
few questions on packet sniffer/analyzer
I have few questions about packet sniffer.
I'm using a zyxel p-600 series modem and a hub to distribute the internet connection.
Can I use a packet sniffer here to determine if the user is ...
25
votes
5answers
5k views
Debugger for Iptables
I'm looking for an easy way to follow a packet through the iptables rules. This is not so much about logging, because I don't want to log all traffic (and I only want to have LOG targets for very few ...
0
votes
2answers
146 views
Identify Executable Creating Network Traffic
I've got some application on my Windows XP machine that is generating an HTTP request to aaronsw.com every half hour. We've trapped the packets in wireshark, but wireshark doesn't tell what ...
1
vote
3answers
850 views
Ntop monitoring - Hosts visible with no SPAN/mirroring
I am attempting to use ntop to monitor traffic over a Cisco Catalyst switch.
I was assuming that in order to see any of the traffic, I'd have to use monitor, as described here: ...
3
votes
5answers
3k views
How to detect an iPhone connecting a network?
I've noticed through watching Wireshark that when an iPhone connects to a wifi network, it sends out a few IGMP/MDNS packets to 224.0.0.251 (LAN broadcast, I think). Is there any easy way to watch ...
2
votes
5answers
2k views
Is it safe to run Wireshark on a production IIS7 server? Is there a good alternative?
We host a bunch of ASP.NET sites on an IIS7 server. Occasionally, we'd like to be able to log HTTP POST data to troubleshoot problems. IIS lets us log the query string, but not the POST data - at ...
3
votes
3answers
731 views
Sniff packets which have source address other than my machine
I tried sniffing network traffic between 2 ip addresses. One is a HTTP server and other is the client accessing that site.
My aim is to sniff POST method form data. How do i do that?
When i tried ...
12
votes
3answers
4k views
Change protocol associated with port in wireshark
I'm trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 - ie as HTTP.
Just using Decode_As on the ...
7
votes
10answers
5k views
Is there an easy command line tool for packet sniffing a single command on linux?
I'd love if there was a single command line tool for packet sniffing a single command in Linux. something like sniff dumpfile command so that you could just run the command you want to packet sniff in ...
4
votes
10answers
571 views
Windows packet sniffer
What packet sniffer would you recommend using, especially in a 50+ workstation environment? I am a fan of Wireshark but it's got quite a bit of security history. Is there something better?
3
votes
3answers
1k views
What's the best way to track Jitter and Packetloss
I need to track Jitter and Packet Loss over a MPLS line. What's the most accurate way to capture this information without interfering with the data being sent back and forth?
Is SmokePing the best ...
3
votes
3answers
2k views
Why to use a commercial packet/protocol analyzer vs. WireShark?
I have never worked in an "enterprise" infrastructure group but have been responsible for small networks. WireShark (Ethereal back in the day) always worked for me in those situations. Where is the ...
