The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
1answer
70 views

sniff mobile traffic data

I'm now preparing an automation testing lab for our mobile department consisting of mainly android devices. For first phase i need HTTP device sniffing, i can't do it on the device as they are not ...
1
vote
1answer
43 views

Cisco ASA 5500 — List of outbound connections?

Is there a command or GUI option to get a list of outbound connections. Ideally, I'd like to know the internal IP address, the external IP address, and the remote port used. I don't need a lot of ...
0
votes
1answer
259 views

Outgoing IP Packet Capture and Logging with iptables

My goal is to use ipset lists in iptables to log outbound traffic to certain IP addresses. I intend to monitor an entire network passively. I have port mirroring enabled and the port mirrored ...
1
vote
1answer
393 views

Passive ethernet tap [closed]

I'm having an hard time figuring out why can't I capture the packets flowing between two devices, in both directions, using a self made Ethernet tap, with copper cable, which looks just like this one: ...
1
vote
1answer
65 views

Port mirroring, 1 source, two destination disadvantages [closed]

What are the disadvantages of having two port mirroring sessions? I have a Cisco 2960 switch in which there is one session having Gi0/1 as source and Fa0/48 as destination. Is it possible to ...
-1
votes
1answer
55 views

can netgear RP614 be configured to enable promisc listening? [closed]

can I confugure NetGear RP614 to be able to receive all packets (packets from and to all machines on my LAN) and inspect them in Wireshark? I enabled promisc on eth0 and in Wireshark but still can ...
1
vote
0answers
155 views

tshark not recognizing wpa psk option

I'm trying to decrypt captured wpa-psk traffic with tshark, but it's not recognizing the option I'm trying to override. This option allows me to specify a PSK to use for decrypting. I'm using tshark ...
0
votes
1answer
137 views

Log http data in unique files using tcpick

I'm trying to use tcpick to log http data in unique files (client and server mixed together). This is one of the examples from tcpick's man page: $ tcpick -i eth0 "port 80" -wRub I expected this to ...
1
vote
0answers
61 views

Configure SilkPerformer to work with Fiddler

Does anyone know how to capture a Silk Performer HTTP request, using Fiddler? We can't seem to capture this information no matter what we try (it seems like it ignores all proxy settings).
2
votes
1answer
163 views

How to Monitor and Log Port Usage and Destination Attempts of a local computer from a Linux Gateway?

I have access to a linux server that is acting as the gateway to an internal network. There is a MagicJack Plus device plugged into this network via CAT5. The MagicJack gets its ip via DHCP from the ...
3
votes
2answers
288 views

tcpdump file size == traffic size?

I created a tcpdump file: tcpdump -i eth0 host xxx.208.xxx.59 -n -s 0 -vvv -w /tmp/dump.dmp duration was about 3 hours. This file now has 450 MB. Can I say now that the IP xxx.208.xxx.59 generated ...
1
vote
2answers
511 views

Thomson TG585v7 router - promiscuous mode

I have a TG585v7 as a router with several machines plugged into it. In the default setup, the packets are only delivered to the specific machine but I want to be able to setup to monitor all network ...
0
votes
0answers
239 views

How can I setup a Proxy I can sniff traffic from using an ESX vSwitch in promiscuous mode?

I have a pretty specific requirement, detailed below. Here's what I'm not looking for help for, to keep things tidy and on topic: How to configure a standard proxy Any ESX setup required to ...
1
vote
2answers
733 views

Can't decrypt imaps traffic in Wireshark

I have currently problems to decrypt IMAPS Traffic in Wireshark. I set up the SSL Key with the correct IP Address, Port 993 and Protocol imap. The Key is the correct one. That is what I see in the ...
-4
votes
2answers
276 views

Getting IP addresses through sniffing [closed]

Is it possible to know the gateway address of a wireless AP that I'm not connected to through sniffing? Airodump-ng can show MAC addresses of the AP and the clients associated but doesn't show IP ...
2
votes
4answers
231 views

Can I read data being sent to/from other computers?

Let's say sniff program is installed on computer A. And let's say I am looking at a Youtube video on the computer B. Can the sniff program see what computer B is doing? If that's possible, witch ...
1
vote
1answer
186 views

Is it possible to capture traffic to the remote web server

I noticed that my user name and password is sent bare text to the remote server inside HTTP POST request. This is a sniffed packed from Wireshark POST /***URL*** HTTP/1.1 Host: ***DNS NAME*** ...
0
votes
2answers
1k views

Problem with WireShark (MySQL sniffing)

How can I snif MySQL data using WireShark? Also I used «mysqlsniffer» and have no results. There are no any packets from MySQL. I've filtered by «MySQL.isPresent» in WireShark but nothing happened. ...
-1
votes
1answer
196 views

Suspicious redirection to russian pages. Is government spying us? [closed]

Recently when I browse some multi-language websites, the default language becomes Russian. An example is www.amd.com which redirects me to http://www.amd.com/ru/Pages/AMDHomePage.aspx I am sure I ...
8
votes
5answers
999 views

A website hosted on the 1.0.0.0/8 subnet, somewhere on the Internet?

Background I'm attempting to demonstrate, using a real-world example, of why someone would not want to configure their internal network on the 1.0.0.0/8 subnet. Obviously it's because this is not ...
4
votes
1answer
477 views

Bittorrent surveillance/monitoring

Is there any tool to sniff bittorrent traffic and reassemble data about the torrent? Im looking for file names, peers, tracker address, local IP, etc. This is purely for academic interest in which all ...
-3
votes
1answer
2k views

Why can't I “decode” packets using Wireshark and some wireless network?

Re, I have no problem capturing packets on various wireless hotspots but there are a couple in my town that I just cannot understand why packets aren't being captured, other than those of my own. ...
5
votes
1answer
3k views

tcpdump: capture one of several vlans

I want tcpdump to capture VLAN 1000 or VLAN 501. man pcap-filter says: The vlan [vlan_id] expression may be used more than once, to filter on VLAN hierarchies. Each use of that expression ...