Sniffer is another word for packet analyzer

learn more… | top users | synonyms (2)

0
votes
0answers
34 views

Network Interfaces Cards and rx_short_length_errors and Linux Kernel

My machine (Linux OS) is counting packets with wrong length, it is a huge environment (GW's, Routers, Switches...) , so I would like to understand how NIC's behaving with these packets. -Does NIC's ...
0
votes
0answers
80 views

Port Mirroring on Wireless router

I will be going on site to help hotel manager to identify who is using P2P (torrents) in hotel and abusing network usage for other guests. Easy option would be 1. Port Mirroring on wireless router ...
0
votes
1answer
64 views

How to monitor if someone is using wireshark in my corporate network

I would like to know if it's possible to monitor if any users are using a network sniffer like Wireshark in my corporate network?.
-1
votes
1answer
82 views

Analyzing twitter packets [closed]

Thanks for your time. I'd like to find a way if a client has made a 'GET' or a 'POST' request for twitter. We are currently doing an educational project and we wanted to understand how we can achieve ...
0
votes
3answers
67 views

Is there some free remote sniffer (aka sniffer on free remote server)? [closed]

I have this setup: ________Company LAN_______ _________ . '| _________ | | .| BUNCH OF | ...
0
votes
1answer
152 views

Port Mirroring to Mac Thunderbolt Ethernet [closed]

I have a switch with port mirroring enabled. So one port is the source port, and the other is the mirror port. In the source port, I have a wifi router plugged in. The mirror port is connected to ...
2
votes
1answer
303 views

Tcpdump on ec2 not seeing all packets

I'm running tcpdump on an Amazon EC2 instance to monitor HTTP traffic going to Nginx (this is just a test box, the only resource is the example test page). Running tcpdump with the command # ...
-5
votes
1answer
332 views

how to sniff from a remote machine? [closed]

I have a PC and a tablet that connected to a TP-Link ADSL modem. PROBLEM: I want to see the packets that send and receive from my modem not my PC( to see both wire and wireless packets) I search ...
0
votes
2answers
138 views

Firewall/Packet Sniffer - forward HTTP requests to a different address

I have a particularly "hacky" question/solution and looking for some honest feedback. In an enterprise system there are a number of requests that are destined for www.sometargeturl.com. These need ...
0
votes
0answers
69 views

View historical data per IP with PRTG packet sniffer

I have recently set up PRTG's packet sniffer sensor for bandwidth monitoring. I am able to pull up historical data in 15 minute increments and see who was the highest user but I would like to see ...
2
votes
1answer
95 views

How easy is it to sniff the SMTP port of webserver to capture mails

I've got a very basic question that I don't know the answer for. Our company owns a webserver that runs multiple websites and works as a mail server for these websites as well (e.g. to send contact ...
1
vote
5answers
126 views

how to identify IP address on eth0 when console isn’t available

I need help about the following I have very old Linux server with one IP address, unfortunately I can’t to access to Linux machine VIA console and I not remember the IP address So I now thinking ...
1
vote
0answers
200 views

why do I lose ping to a machine when using port mirroring / monitoring (sniffing)?

I am using port mirroring / monitoring in my 3COM layer 3 switches to look at network traffic (using wireshark). Sometimes, I have found that I loose connectivity with the remote monitor machine ...
1
vote
1answer
731 views

Mirror network packets from WiFi to Ethernet in an ASUS Router RT N53

I have an ASUS RT N53 router, running the default firmware (Linux 2.6.22 with busybox and uclibc). I need to capture data packets from some Wi-Fi devices I have connected to that router (iPad and some ...
0
votes
3answers
2k views

How to sniff all HTTP packets on a wifi network? [closed]

I need to sniff all HTTP packets that pass through my wifi network (in particular HTTP requests by my smartphone). I've tried with wireshark, but I can sniff only packets to and from my pc. What am I ...
0
votes
1answer
106 views

Meraki VPN Traffic Capture

We have multiple offices interconnected via VPN using Meraki switches. I've been looking around and can't seem to find a way, but was thinking it's possible. Is it possible for me to put my desktop on ...
-1
votes
1answer
62 views

can netgear RP614 be configured to enable promisc listening? [closed]

can I confugure NetGear RP614 to be able to receive all packets (packets from and to all machines on my LAN) and inspect them in Wireshark? I enabled promisc on eth0 and in Wireshark but still can ...
3
votes
2answers
318 views

What are cables/boxes called for listening in on a RJ45 cable?

I would like to capture the traffic from a router, so I assume there must exist a cable or hardware box with 3 RJ45 socks, where two of them are IN and OUT, and the third is for capturing device (a ...
1
vote
3answers
845 views

How can I log OpenVPN packet contents?

I'm designing a developer tool that would analyse and debug arbitrary network connections, but I want to provide it as a service rather than software to be installed locally. Ideally I would like to ...
2
votes
2answers
223 views

What to use to get meaningful network statistics

A customer has a rack with some 1U servers and Dell™ PowerConnect™ 2716 switch at ISP's server room. One port is uplink to the ISP. Some servers run ESX5 while one 1U server is a plain Windows 2008 R2 ...
0
votes
1answer
282 views

Log http data in unique files using tcpick

I'm trying to use tcpick to log http data in unique files (client and server mixed together). This is one of the examples from tcpick's man page: $ tcpick -i eth0 "port 80" -wRub I expected this to ...
4
votes
3answers
999 views

Can our firewall detect traffic sniffing inside the network?

We use Cisco ASA's firewall and NAT functions in our network (200 computers). Is there any possibility to configure Cisco ASA to detect traffic sniffering (for example wireshark) and network ...
3
votes
2answers
347 views

tcpdump file size == traffic size?

I created a tcpdump file: tcpdump -i eth0 host xxx.208.xxx.59 -n -s 0 -vvv -w /tmp/dump.dmp duration was about 3 hours. This file now has 450 MB. Can I say now that the IP xxx.208.xxx.59 generated ...
3
votes
2answers
2k views

Sniff SSL handshake using tshark

How do I get a dump of a SSL handshake in a human readable format using tshark? I need to provide this to a vendor for debugging a failed SSL handshake problem. This needs to be done in tshark, not ...
1
vote
4answers
2k views

Sniffing packets of specific binaries / apps / process id?

Is there a way to associate packets with executing binaries? I would be open to traditional sniffing methods or even dtrace for that matter. I have a specific issue on a system with very high ...
-5
votes
1answer
75 views

keystroke logger [closed]

I have just started a networking module in college and am really interested in this area, and would like to continue in this career path. I have tried to get an answer from my lecturer but she cant ...
1
vote
1answer
578 views

OpenVPN client “reboot loop”, but still working slowly

I have a personal OpenVPN server out on "the tubes". Last week, I was able to connect without incident and with very good performance. This week, when I manage to connect, the client seems to enter a ...
0
votes
1answer
297 views

How to sniff udp between two windows applications on the same machine

How do I monitor the duplex udp traffic between two apps on my windows machine.
1
vote
1answer
307 views

PCAP to Syslog utility

I am looking for a tool which sniff all the traffic on an interface and produce a syslog like Cisco log in real time. Example : Feb 16 10:19:05 tcp S.S.S.S(6083) -> D.D.D.D(80), 1 packet Feb 16 ...
2
votes
2answers
93 views

Capturing wireless packets on my wireless network

Is it possible to capture wireless packets on my wireless network using sniffers (ie. wireshark)? If so, could you give links that can guide me to do this?
4
votes
4answers
590 views

Capture network traffic of a single application?

I am looking for a method / hack / kernel module to capture network traffic of a PID and all it's forks / child processes. I have a firefox applications that opens some web pages and starts to stream ...
16
votes
3answers
2k views

How does network sniffing software work over a switch?

We have several of standard non-managed 3com switches in a network. I thought switches were supposed to only send packages between peers of a connection. However it appears network sniffing software ...
0
votes
1answer
781 views

How to sniff request packet on VPN server?

With some safe reasons, I need to sniff pptp cleint request packets, then to get dst ip and src ip, for example 10.5.1.100 -> 218.100.211.100 , I want to know the correct rule in tcpdump
3
votes
2answers
307 views

http sniffer for windows

I am used to analyze http traffic response times and other useful statistical informations using justniffer for linux equipped servers. Does anybody knows about an http sniffer like justniffer for ...
2
votes
4answers
248 views

Can I read data being sent to/from other computers?

Let's say sniff program is installed on computer A. And let's say I am looking at a Youtube video on the computer B. Can the sniff program see what computer B is doing? If that's possible, witch ...
1
vote
2answers
165 views

Packet sniffing SMTP connection

I have a program on Windows that sends email via a remote SMTP server, and it is failing with an ambiguous "cannot connect" error message with no log or other information as to why it is failing. I ...
0
votes
1answer
113 views

Deep packet Inspection

Recently it came across me that some of the users might be abusing our platform not conform to our rules. Basically what we run is a platform for students by students. We sell shell accounts and VPS ...
1
vote
1answer
565 views

Finding source of RST packet on ASA 5505

I've ran wireshark on our app server and noticed a reset packet is commonly being received when sending data to a remote telnet server when the connection has been idle for an hour or so. I've read ...
2
votes
1answer
445 views

Why HTTP sniffers aren't able to capture PHP generated HTTP traffic?

I can't get why HTTP Analyzer (I prefer this one because it is capable of decoding SSL encoded data transfered through HTTPS) isn't able to capture PHP generated HTTP traffic. It capture HTTP traffic ...
3
votes
2answers
2k views

Silently start Wireshark

I have a computer in our office that always gets infected by viruses. Because of this, I would like to use Wireshark (or at least something) to monitor internet traffic for a while on this machine. ...
0
votes
2answers
241 views

What is the best way to monitor all traffic of a subnet with CISCO infrastructure?

I'm in the process of setting up a network security lab and want to monitor all packets leaving and entering the network. I'll get a 2Gbit/sec uplink as a channel terminated on a CISCO 3750 switch and ...
0
votes
2answers
1k views

Getting wireshark to see network (uplink) traffic?

I have wireshark on a win 7 toshiba laptop plugged in to a hp procurve switch. I set the port the laptop is plugged in to as a 'monitor' port, monitoring all the other ports. I have 1 other computer ...
0
votes
1answer
91 views

How can I see dumps of wholе HTTP packets in FreeBSD?

I need to see whole HTTP packets sent and recieved by an application for debugging purposes. How can this be done in command-line?
6
votes
5answers
7k views

How to display interface in tcpdump output flow?

This seems to be quite a trivial problem, but after some searching I can't stil figure out the answer. One can run tcpdump using "any" as the interface description, ie: # tcpdump -i any -n host ...
4
votes
5answers
3k views

Using a router to intercept HTTP data. Sniffing?

This is my first serverfault post. I've been a member of Stack Overflow for a while and doubt that this question would fly over there. I have my PS3 and XBOX 360 hard wired to a Linksys Wireless N ...
0
votes
3answers
7k views

Debugging UPnP / DLNA via Wireshark

Is there any way to parse / interpret the XMLs sent as part of a DLNA / UPnP using Wireshark, or any other network sniffer? I can get the raw packets, but it would be nice to see them parsed, to make ...
3
votes
7answers
3k views

Anyone know a good self contained packet sniffer?

In the course of my sysadmin/network administration duties, I need to packet sniff for connectivity issues. Unfortunately, this often occurs on machines I don't 'own'. Servers under the purview of ...
1
vote
2answers
117 views

Passing credentials over non-secure, non public domain

Exactly how un-secure is this scenario, please note that I can't use SSL due to restrictions in the website application (yeah go figure!): We have a domain that is only known to the users who need ...
0
votes
6answers
2k views

how to check for sniffers in Ubuntu?

Somebody is accusing me that my linux ubuntu machine could be the source for a server attack. Their technique was replacing the original ssh by this patched ssh and, as such eliminated all ...
2
votes
1answer
905 views

IP ACL for SPAN port on 3560

My scenario is that I have > 1g of traffic on a switch, but only a 1g monitor port. But the traffic I'm actually interested in is only about 10mbps, the rest can be ignored. I have one 3560 switch, ...