Questions tagged [packet-sniffer]
Sniffer is another word for packet analyzer
9
questions
36
votes
9
answers
81k
views
How to display interface in tcpdump output flow?
This seems to be quite a trivial problem, but after some searching I can't stil figure out the answer. One can run tcpdump using "any" as the interface description, ie:
# tcpdump -i any -n host 192....
- 834
22
votes
3
answers
11k
views
How does network sniffing software work over a switch?
We have several of standard non-managed 3com switches in a network. I thought switches were supposed to only send packages between peers of a connection.
However it appears network sniffing software ...
- 978
14
votes
1
answer
14k
views
WEP/WPA/WPA2 and wifi sniffing
I know that WEP traffic can be "sniffed" by any user of the WIFI.
I know that WPA/WPA2 traffic is encrypted using a different link key for each user, so they can't sniff traffic... unless they ...
- 263
8
votes
2
answers
9k
views
Sniff SSL handshake using tshark
How do I get a dump of a SSL handshake in a human readable format using tshark? I need to provide this to a vendor for debugging a failed SSL handshake problem.
This needs to be done in tshark, not ...
- 265
8
votes
9
answers
6k
views
Find Sniffer on LAN
What tools or techniques are available for *nix and Windows that help in finding if someone else on the LAN is using a sniffer?
Having said that and strongly considering that there are tools out ...
- 227
6
votes
3
answers
8k
views
Find IP address of a device?
Open question: How to find the IP address of a device?
As I understand, there are no guaranteed methods that work always, but there's a hundred approaches that work in specific situations, and I'd ...
3
votes
3
answers
14k
views
How can I log OpenVPN packet contents?
I'm designing a developer tool that would analyse and debug arbitrary network connections, but I want to provide it as a service rather than software to be installed locally.
Ideally I would like to ...
- 98
1
vote
1
answer
1k
views
Finding source of RST packet on ASA 5505
I've ran wireshark on our app server and noticed a reset packet is commonly being received when sending data to a remote telnet server when the connection has been idle for an hour or so.
I've read ...
- 325
0
votes
0
answers
200
views
In the output of Chaosreader, where are the source and destination port numbers and IP addresses for each packet?
I used this tutorial to use Chaosreader on an output file of WinDump. My purpose was to get the HTTP payload, which I got. But I'd also like to extract other information, like source IP and ...
- 23