Questions tagged [sniffing]

Sniffing is the act of passively collecting all network traffic that a machine hears, whether or not it is addressed to that machine. Commonly performed for network diagnostics, programming debugging and troubleshooting, and security analysis.

299 questions
247
votes
15 answers

Looking for HTTP debugging proxy for Mac similar to Fiddler on Windows

In previous jobs when I've worked on a Windows machine, I've used Fiddler for viewing HTTP transactions and debugging. I'm specifically looking to monitor the HTTP transactions for an ajax site I'm working on to verify that the site is doing what I…
Doug Harris
  • 28,397
33
votes
5 answers

What stops an internet router from sniffing my traffic?

Packets travel through internetworks, and take many routes through internet routers. On each route that forwards traffic to another until reaching the ultimate destination, what stops them from viewing the packets they receive/forward?
32
votes
1 answer

Mac Wireshark alternatives

Do you know any good alternatives for wireshark (network analyzer) running on a Mac OS X 10.5+? Wireshark is not that handy like on an Windows OS (user interface with X11, ...). Any kind of help is appreciated.
road242
  • 638
20
votes
6 answers

Capture traffic for specific application

I have an application which communicates with some server. I want to know what the IP of this server is. How can I capture all the traffic from a specific application and not just all the traffic like Wireshark does?
melco-man
  • 329
20
votes
4 answers

How to sniff for wireless MAC addresses in area - My laptop got stolen

A few days ago my apartment got broken in, and they took all the electronics, including my $1500 laptop. We are pretty sure it's an inside job (as in someone from the same building), so I believe that the stuff is in someones apartment. Is there…
infinity
  • 303
19
votes
2 answers

Can I detect sniffers in monitor mode on my Wi-Fi?

Attackers can sniff Wi-Fi networks in monitor mode to intercept the data without connecting to the router. Is it possible to check if somebody is sniffing my network?
Nathiss
  • 301
17
votes
6 answers

How to capture last N seconds of packets using tcpdump

How can I capture the last N seconds of packets using tcpdump?
sushant
15
votes
4 answers

How can I capture packets going from my router to a specific server?

I have a small local network in my house that has two computers connected to a modem-router. I want to capture the packets going from the router to a specific server (I know the IP address of the server). The router's manufacturer is D-Link.
14
votes
3 answers

Is there a nice, graphical, packet sniffer for Mac OSX?

I have Wireshark and have used tcpdump, but I was wondering if there was a nice GUI to capture and view packets on the Mac. Ideally, something that is protocol aware, so that it knows how to break up an HTTP request, is able to show SMTP information…
Tim
  • 1,387
14
votes
4 answers

How do I return just the Http header from tshark?

I'm using tshark to sniff my packets and I'm only concerned with the http header (preferably in the form its sent, but I'll take what I can get). I tried using: tshark tcp port 80 or tcp port 443 -V -R "http" Which gave me the header, but also…
tzenes
  • 389
13
votes
5 answers

Windows tool to find out which port an app is trying to use?

I am guessing that netstat shows apps and their ports that already have a connection and it doesn't show or can't show an app that is trying to open a connection. If I have an app that's trying to connect to the net but is blocked by a firewall, how…
Tony_Henrich
  • 12,156
12
votes
4 answers

Sniffing and logging HTTP Traffic through my wireless router

I want to sniff traffic going through my wireless router. The router is provided by my cable company, so I don't want to flash the firmware or anything, so my questions is: Is there any software or such that I can install on one of the computers…
11
votes
1 answer

Capturing traffic by HTTP host name, not by IP, via WireShark

I'm trying to filter traffic only to a given HTTP host name. I have a server, and I have dozens of websites on it. It only has one interface and one IP address. Thus filtering to my IP address is not helpful here. Say for example I have a.com,…
11
votes
2 answers

Replay UDP Packet Capture

I have a UDP packet capture which was streamed from Port1 on IP1 to Port2 on IP2 on network N1. I need to replay these packets on another network N2 from Port3 on IP3 to Port4 on IP4. I need to know what software to use in order to do this and how I…
11
votes
3 answers

Chrome browser sending Keep-Alive packets?

I ran Wireshark on my PC and found that my chrome browser was sending LOTS of Keep-alive packets even when there are no sites loaded in the browser, and even when there are no extensions installed!! I don't recognize the IPs that Chrome is trying…
nmc
  • 237
1
2 3
19 20