The sniffing tag has no wiki summary.
0
votes
1answer
34 views
can netgear RP614 be configured to enable promisc listening? [closed]
can I confugure NetGear RP614 to be able to receive all packets (packets from and to all machines on my LAN) and inspect them in Wireshark?
I enabled promisc on eth0 and in Wireshark but still can ...
0
votes
0answers
25 views
sniffdet-0.9 make error [closed]
I need your help configuring and installing sniffdet tool. Currently I'm using sniffdet0.9 for my environment. My base environment is using libnet version 1.0.2a and ubuntu o/s as kernel 3.2.6 x86_64
...
-5
votes
3answers
93 views
Can I set my local MAC and IP as my router's so I could sniff it's traffic? [closed]
MAC and IP Address of my gateway/router is:
00-0C-42-54-D5-37
192.168.0.1
My laptop MAC and IP Address is as follows:
00-0C-42-54-D5-35
192.168.0.101
They are both different from each other. I ...
1
vote
0answers
112 views
tshark not recognizing wpa psk option
I'm trying to decrypt captured wpa-psk traffic with tshark, but it's not recognizing the option I'm trying to override. This option allows me to specify a PSK to use for decrypting. I'm using tshark ...
0
votes
1answer
65 views
Log http data in unique files using tcpick
I'm trying to use tcpick to log http data in unique files (client and server mixed together). This is one of the examples from tcpick's man page:
$ tcpick -i eth0 "port 80" -wRub
I expected this to ...
1
vote
0answers
38 views
Configure SilkPerformer to work with Fiddler
Does anyone know how to capture a Silk Performer HTTP request, using Fiddler?
We can't seem to capture this information no matter what we try (it seems like it ignores all proxy settings).
2
votes
1answer
129 views
How to Monitor and Log Port Usage and Destination Attempts of a local computer from a Linux Gateway?
I have access to a linux server that is acting as the gateway to an internal network.
There is a MagicJack Plus device plugged into this network via CAT5.
The MagicJack gets its ip via DHCP from the ...
3
votes
2answers
225 views
tcpdump file size == traffic size?
I created a tcpdump file:
tcpdump -i eth0 host xxx.208.xxx.59 -n -s 0 -vvv -w /tmp/dump.dmp
duration was about 3 hours.
This file now has 450 MB. Can I say now that the IP xxx.208.xxx.59 generated ...
1
vote
1answer
274 views
Thomson TG585v7 router - promiscuous mode
I have a TG585v7 as a router with several machines plugged into it. In the default setup, the packets are only delivered to the specific machine but I want to be able to setup to monitor all network ...
0
votes
0answers
144 views
How can I setup a Proxy I can sniff traffic from using an ESX vSwitch in promiscuous mode?
I have a pretty specific requirement, detailed below. Here's what I'm not looking for help for, to keep things tidy and on topic:
How to configure a standard proxy
Any ESX setup required to ...
1
vote
2answers
462 views
Can't decrypt imaps traffic in Wireshark
I have currently problems to decrypt IMAPS Traffic in Wireshark.
I set up the SSL Key with the correct IP Address, Port 993 and Protocol imap. The Key is the correct one.
That is what I see in the ...
-4
votes
2answers
186 views
Getting IP addresses through sniffing [closed]
Is it possible to know the gateway address of a wireless AP that I'm not connected to through sniffing? Airodump-ng can show MAC addresses of the AP and the clients associated but doesn't show IP ...
2
votes
4answers
218 views
Can I read data being sent to/from other computers?
Let's say sniff program is installed on computer A. And let's say I am looking at a Youtube video on the computer B.
Can the sniff program see what computer B is doing?
If that's possible, witch ...
1
vote
1answer
157 views
Is it possible to capture traffic to the remote web server
I noticed that my user name and password is sent bare text to the remote server inside HTTP POST request. This is a sniffed packed from Wireshark
POST /***URL*** HTTP/1.1
Host: ***DNS NAME***
...
0
votes
2answers
901 views
Problem with WireShark (MySQL sniffing)
How can I snif MySQL data using WireShark? Also I used «mysqlsniffer» and have no results. There are no any packets from MySQL. I've filtered by «MySQL.isPresent» in WireShark but nothing happened.
...
-1
votes
1answer
180 views
Suspicious redirection to russian pages. Is government spying us? [closed]
Recently when I browse some multi-language websites, the default language becomes Russian.
An example is www.amd.com which redirects me to http://www.amd.com/ru/Pages/AMDHomePage.aspx
I am sure I ...
8
votes
5answers
837 views
A website hosted on the 1.0.0.0/8 subnet, somewhere on the Internet?
Background
I'm attempting to demonstrate, using a real-world example, of why someone would not want to configure their internal network on the 1.0.0.0/8 subnet. Obviously it's because this is not ...
3
votes
1answer
370 views
Bittorrent surveillance/monitoring
Is there any tool to sniff bittorrent traffic and reassemble data about the torrent? Im looking for file names, peers, tracker address, local IP, etc. This is purely for academic interest in which all ...
-3
votes
1answer
2k views
Why can't I “decode” packets using Wireshark and some wireless network?
Re,
I have no problem capturing packets on various wireless hotspots but there are a couple in my town that I just cannot understand why packets aren't being captured, other than those of my own. ...
4
votes
1answer
2k views
tcpdump: capture one of several vlans
I want tcpdump to capture VLAN 1000 or VLAN 501. man pcap-filter says:
The vlan [vlan_id] expression may be used more than once, to filter on VLAN hierarchies. Each use of that expression ...
