Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [packet-sniffer]

Sniffer is another word for packet analyzer

A sniffer, or packet analyzer, is a tool that intercepts data-packets from networks (ehternet,wireless,...).

A very known packet sniffer is wireshark.

97 questions
4
votes
3 answers

Can our firewall detect traffic sniffing inside the network?

We use Cisco ASA's firewall and NAT functions in our network (200 computers). Is there any possibility to configure Cisco ASA to detect traffic sniffering (for example wireshark) and network inspection(for example "nmap -sP 192.168.0.*") inside our…
Arthur Elimhanov
  • 41
  • 1
  • 2
4
votes
4 answers

Capture network traffic of a single application?

I am looking for a method / hack / kernel module to capture network traffic of a PID and all it's forks / child processes. I have a firefox applications that opens some web pages and starts to stream stuff with flash streaming, wmv, or any other…
Maxim Veksler
  • 2,555
  • 10
  • 27
  • 32
4
votes
11 answers

Windows packet sniffer

What packet sniffer would you recommend using, especially in a 50+ workstation environment? I am a fan of Wireshark but it's got quite a bit of security history. Is there something better?
Terry
  • 1,073
  • 1
  • 11
  • 17
3
votes
3 answers

What are cables/boxes called for listening in on a RJ45 cable?

I would like to capture the traffic from a router, so I assume there must exist a cable or hardware box with 3 RJ45 socks, where two of them are IN and OUT, and the third is for capturing device (a Linux host in my case). What are such cables/boxes…
Sandra
  • 9,973
  • 37
  • 104
  • 160
3
votes
2 answers

tcpdump file size == traffic size?

I created a tcpdump file: tcpdump -i eth0 host xxx.208.xxx.59 -n -s 0 -vvv -w /tmp/dump.dmp duration was about 3 hours. This file now has 450 MB. Can I say now that the IP xxx.208.xxx.59 generated 450 MB traffic in 3 hours?
Danzzz
  • 55
  • 1
  • 5
3
votes
2 answers

Capturing wireless packets on my wireless network

Is it possible to capture wireless packets on my wireless network using sniffers (ie. wireshark)? If so, could you give links that can guide me to do this?
Dave
  • 215
  • 3
  • 8
3
votes
2 answers

http sniffer for windows

I am used to analyze http traffic response times and other useful statistical informations using justniffer for linux equipped servers. Does anybody knows about an http sniffer like justniffer for Windows server?
user104443
  • 31
  • 1
3
votes
7 answers

Anyone know a good self contained packet sniffer?

In the course of my sysadmin/network administration duties, I need to packet sniff for connectivity issues. Unfortunately, this often occurs on machines I don't 'own'. Servers under the purview of other administrators, end users' home machines, or…
Christopher Karel
  • 6,442
  • 1
  • 26
  • 34
2
votes
1 answer

Analyzing traffic by tcpdump between HAProxy server and mariadb

I was testing tcpdump too see the traffic between HAProxy server and mariadb server. These are the results: 23:07:22.328958 00:0c:29:a9:28:a8 > 00:50:56:b0:e0:ea, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 64, id 62140, offset 0, flags [DF],…
user3637971
  • 53
  • 1
  • 10
2
votes
2 answers

Monitor where an application is connecting to on MacOSX

I just downloaded wireshark for mac as I am trying to find out exactly where an app is connecting. I need to see the URL and the protocol whether it is https or http. I am very new to Wireshark and testing in general and as such would require a…
JamesG
  • 121
  • 3
2
votes
2 answers

Process names in MS Message Analyzer

I am trying to set up the Message Analyzer viewer exactly like it is explained in this reference, but instead of steady process names I got some weird numbers, both in ProcessName and ProcessID columns. I use standard Wireless scenario and…
Suncatcher
  • 552
  • 2
  • 7
  • 22
2
votes
1 answer

How easy is it to sniff the SMTP port of webserver to capture mails

I've got a very basic question that I don't know the answer for. Our company owns a webserver that runs multiple websites and works as a mail server for these websites as well (e.g. to send contact form mails). How easy is it to sniff the SMTP port…
Zeep
  • 107
  • 2
  • 6
2
votes
1 answer

Mirror network packets from WiFi to Ethernet in an ASUS Router RT N53

I have an ASUS RT N53 router, running the default firmware (Linux 2.6.22 with busybox and uclibc). I need to capture data packets from some Wi-Fi devices I have connected to that router (iPad and some smartphones), but the router is not forwarding…
fazineroso
  • 123
  • 1
  • 5
2
votes
3 answers

How can I log OpenVPN packet contents?

I'm designing a developer tool that would analyse and debug arbitrary network connections, but I want to provide it as a service rather than software to be installed locally. Ideally I would like to save all inbound and outbound packets on a…
Jim
  • 88
  • 1
  • 1
  • 8
2
votes
2 answers

What to use to get meaningful network statistics

A customer has a rack with some 1U servers and Dell™ PowerConnect™ 2716 switch at ISP's server room. One port is uplink to the ISP. Some servers run ESX5 while one 1U server is a plain Windows 2008 R2 box with 2 nics. The switch allows me to use web…
Henno
  • 1,046
  • 5
  • 19
  • 33
1
2
3 4 5 6 7