Sniffer is another word for packet analyzer
1
vote
3answers
161 views
How can I log OpenVPN packet contents?
I'm designing a developer tool that would analyse and debug arbitrary network connections, but I want to provide it as a service rather than software to be installed locally.
Ideally I would like to ...
2
votes
2answers
91 views
What to use to get meaningful network statistics
A customer has a rack with some 1U servers and Dell™ PowerConnect™ 2716 switch at ISP's server room. One port is uplink to the ISP. Some servers run ESX5 while one 1U server is a plain Windows 2008 R2 ...
0
votes
1answer
65 views
Log http data in unique files using tcpick
I'm trying to use tcpick to log http data in unique files (client and server mixed together). This is one of the examples from tcpick's man page:
$ tcpick -i eth0 "port 80" -wRub
I expected this to ...
4
votes
3answers
456 views
Can our firewall detect traffic sniffing inside the network?
We use Cisco ASA's firewall and NAT functions in our network (200 computers).
Is there any possibility to configure Cisco ASA to detect traffic sniffering (for example wireshark) and network ...
3
votes
2answers
456 views
Sniff SSL handshake using tshark
How do I get a dump of a SSL handshake in a human readable format using tshark? I need to provide this to a vendor for debugging a failed SSL handshake problem.
This needs to be done in tshark, not ...
1
vote
4answers
785 views
Sniffing packets of specific binaries / apps / process id?
Is there a way to associate packets with executing binaries? I would be open to traditional sniffing methods or even dtrace for that matter.
I have a specific issue on a system with very high ...
-5
votes
1answer
69 views
keystroke logger [closed]
I have just started a networking module in college and am really interested in this area, and would like to continue in this career path. I have tried to get an answer from my lecturer but she cant ...
0
votes
1answer
171 views
How to sniff udp between two windows applications on the same machine
How do I monitor the duplex udp traffic between two apps on my windows machine.
1
vote
1answer
124 views
PCAP to Syslog utility
I am looking for a tool which sniff all the traffic on an interface and produce a syslog like Cisco log in real time.
Example :
Feb 16 10:19:05 tcp S.S.S.S(6083) -> D.D.D.D(80), 1 packet
Feb 16 ...
14
votes
3answers
1k views
How does network sniffing software work over a switch?
We have several of standard non-managed 3com switches in a network. I thought switches were supposed to only send packages between peers of a connection.
However it appears network sniffing software ...
0
votes
1answer
237 views
How to sniff request packet on VPN server?
With some safe reasons, I need to sniff pptp cleint request packets, then to get dst ip and src ip, for example 10.5.1.100 -> 218.100.211.100 , I want to know the correct rule in tcpdump
3
votes
2answers
210 views
http sniffer for windows
I am used to analyze http traffic response times and other useful statistical informations using justniffer for linux equipped servers.
Does anybody knows about an http sniffer like justniffer for ...
2
votes
4answers
218 views
Can I read data being sent to/from other computers?
Let's say sniff program is installed on computer A. And let's say I am looking at a Youtube video on the computer B.
Can the sniff program see what computer B is doing?
If that's possible, witch ...
2
votes
1answer
282 views
Why HTTP sniffers aren't able to capture PHP generated HTTP traffic?
I can't get why HTTP Analyzer (I prefer this one because it is capable of decoding SSL encoded data transfered through HTTPS) isn't able to capture PHP generated HTTP traffic. It capture HTTP traffic ...
0
votes
2answers
128 views
What is the best way to monitor all traffic of a subnet with CISCO infrastructure?
I'm in the process of setting up a network security lab and want to monitor all packets leaving and entering the network. I'll get a 2Gbit/sec uplink as a channel terminated on a CISCO 3750 switch and ...
0
votes
2answers
1k views
Getting wireshark to see network (uplink) traffic?
I have wireshark on a win 7 toshiba laptop plugged in to a hp procurve switch. I set the port the laptop is plugged in to as a 'monitor' port, monitoring all the other ports.
I have 1 other computer ...
3
votes
4answers
2k views
How to display interface in tcpdump output flow?
This seems to be quite a trivial problem, but after some searching I can't stil figure out the answer. One can run tcpdump using "any" as the interface description, ie:
# tcpdump -i any -n host ...
4
votes
5answers
2k views
Using a router to intercept HTTP data. Sniffing?
This is my first serverfault post. I've been a member of Stack Overflow for a while and doubt that this question would fly over there.
I have my PS3 and XBOX 360 hard wired to a Linksys Wireless N ...
0
votes
3answers
4k views
Debugging UPnP / DLNA via Wireshark
Is there any way to parse / interpret the XMLs sent as part of a DLNA / UPnP using Wireshark, or any other network sniffer?
I can get the raw packets, but it would be nice to see them parsed, to make ...
0
votes
6answers
1k views
how to check for sniffers in Ubuntu?
Somebody is accusing me that my linux ubuntu machine could be the source for a server attack.
Their technique was replacing the
original ssh by this patched ssh and,
as such eliminated all ...
2
votes
1answer
562 views
IP ACL for SPAN port on 3560
My scenario is that I have > 1g of traffic on a switch, but only a 1g monitor port. But the traffic I'm actually interested in is only about 10mbps, the rest can be ignored.
I have one 3560 switch, ...
2
votes
3answers
2k views
How can i sniff/dump HTTP protocol as ASCII for a port with tcpdump or altenative?
I need to view how an application is sending and is receiving traffic through a http protocol that it comunicates on localhost (it has an embeded port coded with .gz)
I'm sure it's some XML that it ...
0
votes
1answer
185 views
Detect and aggregate packets sent to server per TCP port
Is there a way with Ubuntu 10.4LTS to detect and aggregate the number of packets transmitted over every port?
In other words, I'd like a process to keep track of the number of packets sent to each ...
13
votes
1answer
7k views
WEP/WPA/WPA2 and wifi sniffing
I know that WEP traffic can be "sniffed" by any user of the WIFI.
I know that WPA/WPA2 traffic is encrypted using a different link key for each user, so they can't sniff traffic... unless they ...
0
votes
1answer
555 views
fast way to find network user computer on domain hogging all wan bandwidth
i have a network of about 40 domain users and i have huge latency wan issues, like 1400ms for google.com pings. I have noticed that the problem goes away after everyone goes home for the day. I would ...
0
votes
3answers
830 views
How to I sniff this from iTunes? [closed]
If you have used Firebug, you know that you can see the "AJAX" requests back and forth.
And you can see the headers sent.
I would like the same thing. Except, I would like to sniff iTunes. I want to ...
0
votes
2answers
2k views
Track IP Messenger's chatting by wireshark
We have Linux server ( RHEL 5 ), and some client machines ( Windows XP ) in local area network. We using server as proxy server.
I am using squid proxy.
My windows machines using internet by proxy.
...
2
votes
1answer
1k views
WireShark - wireshark trace traffic from my local browser to a local .net application I have with a HttpListener? (e.g. local to local)
Can wireshark trace traffic from my local browser to a local .net
application I have with a HttpListener? (e.g. local to local)
I can't seem to detect this traffic at the moment with wireshark. Is
...
0
votes
2answers
852 views
Free Packet Sniffer which can capture http loopback traffic? [closed]
Is there a free Packet Sniffer which can capture http loopback (to and from localhost) traffic? Must work in Windows 7 64bit. Other than Wireshark & Fiddler.
0
votes
3answers
111 views
Can an external server be used to encrypt all traffic
My work takes me to a number of places with WiFi connection. I want to be able to encrypt the traffic between my laptop and the internet. Can I do this with a VPN server? What is the best way to get ...
11
votes
3answers
8k views
2
votes
3answers
794 views
Good (free / open source) tools for analyzing TCP capture files?
I use wireshark and microsoft network monitor extensively, but I'm curious if there are other good (hopefully free / open source) software packages for analyzing TCP/IP traffic?
I'm especially ...
8
votes
10answers
31k views
Find which machine is using all the bandwidth
I need to know which machine is taking all the network bandwith.
It's there a tool I can use to monitor my local network and know which machine is taking all the LAN bandwith?
What do you think ...
0
votes
3answers
342 views
Port Sniffing - Is it possible?
Is it possible to sniff a specific port on an ip address? If so is there any software available for that?
0
votes
3answers
339 views
Best way to live edit packets from another computer
I'd like to study some MMORPG's protocols (I am a game programmer), but they all use "hackshielding software" that disallow me to do much from the computer they are running.
I want to know how I ...
4
votes
7answers
1k views
sniffing on a switched LAN
I often find myself in the position of having to sniff on a connection between for example an arm board I am developing on, and another computer on the network, or out of the network.
The easy ...
1
vote
3answers
878 views
Understanding VOIP “sniffer” traces
My customer is doing an Avaya VOIP pilot. I am looking at traces in Wireshark to build my troubleshooting skills. I have found much documentation on VOIP, but little that focuses on protocol ...
1
vote
3answers
2k views
Tool to capture outbound http packets in a linux server
I was searching for a tool to capture http packets sent from a linux server to an external server. Normally I use iftop or iptraf with filters to see real time information and tcpdump to get verbose ...
4
votes
10answers
572 views
Windows packet sniffer
What packet sniffer would you recommend using, especially in a 50+ workstation environment? I am a fan of Wireshark but it's got quite a bit of security history. Is there something better?
5
votes
10answers
3k views
Find Sniffer on LAN
HI,
What tools or techniques are available for *nix and Windows that help in finding if someone else on the LAN is using a sniffer?
Having said that and strongly considering that there are tools out ...