A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

learn more… | top users | synonyms

0
votes
1answer
524 views

What's the best route to watch network traffic on our networks?

We have a single switch that routes all our different offices around the country using Meraki VPN. We have a VM on the switch (to the extent it can see all subdomains and different IP addresses in our ...
1
vote
2answers
6k views

How can I monitor traffic of devices on my WiFi? [closed]

I have my kids cell phones attached to my router. What can I install to view what they are browsing and the media they have? I want to make sure my kids are safe
2
votes
1answer
355 views

Reassemble sniffed packets [closed]

I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the ...
3
votes
2answers
2k views

how to monitor a Wifi (802.11) network?

How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
0
votes
2answers
137 views

How to know what domains other clients visit if I have no access to the router?

As a client computer, I am behind a router to which I have no access. Is it possible for me to know the domains or IP addresses that other clients visit? I want to know which clients often download ...
6
votes
2answers
1k views

How to hack a switch connected network with static ARP?

For example, if there is a network with three computers connected to the same switch, Alice, Bob, and Eve. If Alice and Bob add each other on their own ARP list as a static ARP entry, and Eve wants to ...
0
votes
2answers
5k views

Can wifi administrator see data transfer over android phone. precisely gmail app communication

sometimes I connect to wifi outside my home in office , restaurants and friends house. I want to know if wifi administrator can see the exact data my android phone communicates? I am only concerned ...
1
vote
1answer
1k views

How does wireshark detects online-messenger traffic?

I have been working on how to find use of online messenger (e.g imo.im, ebuddy) using wireshark. I'm doing , as i need to build SIEM (security information event management) use-cases which detects ...
10
votes
4answers
4k views

Security measures against packet sniffing

I work in a environment where packet sniffing can be easily done . I was worried about my confidential data . Please suggest how is it done and precaution which i can take at client level.
1
vote
3answers
235 views

Any one know about UDP traffic on source port 26221?

On my captured network traffic i observe a flow having a source udp port of 26221 and have different destination udp ports. Some of these destination ports were standards IANA ports. The average ...
1
vote
1answer
458 views

What's most standard way to secure internet connections and protect privacy?

It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
4
votes
1answer
474 views

Trying to figure out Gmail login in Wireshark

In my pentesting lab I'm using ettercap for do a mitm to a XP VM. I go to gmail, accepting the false certification, and here I start to sniff with wireshark. I put some false account like ...
2
votes
4answers
486 views

Which Wifi encryption method is secure?

you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
6
votes
3answers
2k views

Capturing and decrypting my own SSL traffic

When I use browser or wget to access another site, some sites will only use HTTPS / SSL automatically. When a site doesn't provide content without encryption, how do I capture what my computer sends ...
0
votes
1answer
151 views

How do the authorities know who's downloading protected software?

Out of curiosity do the web based file hosting services such as Oron and Rapidshare store information about who downloads what? I ask because I'm wondering, when someone is "caught" downloading ...
9
votes
3answers
6k views

How can I detect if someone is sniffing network packets on the LAN?

I would like to know if there is a product or software that can detect if there is a sniffer currently on the network? In other words is it possible at all to detect if there is a network card on ...
0
votes
2answers
664 views

Weird IP addresses showing up on my server

I have a personal server located in the US, I use it to execute code which requires a lot of resources. I sometimes have apache running on my server, to test php code. I recently left my apache server ...
2
votes
3answers
2k views

TOR and sniffing data

If I'm not mistaken, TOR works opening a random anonymous path between two hosts using others computers that have TOR installed no? Then... everybody can sniff the data of the others no? Just wait ...
0
votes
0answers
34 views

Sniff GSM packets Wireshark [duplicate]

Possible Duplicate: Smartphone / GSM Sniffer I noticed in a video on youtube is possible to sniff gsm traffic using wireshark. How is this possible ? Do I need a GSM modem to acheive this ...
3
votes
3answers
983 views

sniff SSH password on the server

Is it possible on the server to log the password encoded by the remote user inside a log. I want to make a honeypot to see the type of user/password used.
6
votes
2answers
329 views

Suspicious 'upstream' traffic

We are seeing unusual amounts of traffic heading upstream on our WAN connection, during the day our system can exceed (or attempt to exceed) the 1Mbps limit imposed on the connection. I have PRTG ...
1
vote
1answer
176 views

Will packet sniffing still work if all connections go through a local proxy?

Will packet sniffing work if all connections use a local proxy? You are forced to use this proxy to get a connection to the internet at all.
2
votes
1answer
1k views

Should we block all plaintext authentication and require authentication over an encrypted channel?

Should we configure our servers to require the authentication happen over an encrypted channel and block all methods of unencrypted, plaintext authentication over? I recently configured my servers to ...
3
votes
2answers
489 views

Electromagnetic induction attacks - reverse TEMPEST?

I know that electromagnetic emissions from a device can be used to extract information from a system, e.g. TEMPEST or Van Eck phreaking. I also know it's possible to induce a signal into a ...
5
votes
1answer
481 views

How do you analyze an unknown network protocol?

Of course Wireshark can be used to sniff traffic - you can inspect each packet or chain of packets. But how would you do it smarter? Which tools do you use to identify behaviors or to automate the ...
3
votes
1answer
198 views

Equipment required for sniffing data / address buses via EM emission

What kind of equipment would be required to sniff data from the electromagnetic emissions of data / address buses on an average motherboard? I'd imagine a sensitive hall probe, a faraday cage and ...
0
votes
1answer
302 views

Can the FiddlerCore library be used for Malware (e.g. MitM attacks)?

I've used the excellent Fiddler web debugging software before and have recently come across the Fiddler Core headless .NET library which gives you all the abilities of Fiddler in library form. It's ...
0
votes
4answers
242 views

How do governments carry out computer surveillance?

If https is really secure as companies tell us, how do governments manage to eavesdrop on terrorist and criminal communications? http://en.wikipedia.org/wiki/Computer_surveillance
2
votes
3answers
166 views

Are my credentials unsafe if I am already logged-in before connecting to a public network?

Let's say I am already logged-in to my Gmail or Yahoo account using my 3G then I switched to a public WIFI in an airport or cafe. Is my username and password still vulnerable? What others kinds of ...
0
votes
1answer
112 views

How can I remotely detect versions? [closed]

I want to know how to remotely detect a software version. Once attacker knows the version installed, he can exploit published vulnerabilities. So it will be useful to know it when doing penetration ...
27
votes
5answers
11k views

What is preventing us from sniffing the mobile phone communcation?

I'm learning wireless penetration testing. It really is amazing. But it made me wonder, what about mobile phones? They are also means of wireless communication. So, our entire voice must be in the air ...
4
votes
3answers
1k views

How do I protect myself against 'hole 196'?

I came across this question a while ago and read about hole 196. Is there something I can install on my laptop to protect it against WPA2 Hole196? Software (such as Snort or DecaffeintID) can ...
2
votes
1answer
3k views

How can I decrypt traffic on a WEP encrypted network?

Let's say that I am connected to a WEP Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the cryptographic key? I found ...
6
votes
1answer
716 views

Cutting and sniffing fiberoptic cables - time before detection?

Suppose you'd cut a fiberoptic cable with two razor sharp mirrors, reflecting the traffic out into your sniffing device and then back into the wire again. How fast would you need to get the traffic up ...
3
votes
8answers
2k views

how can you view an HTTP request in transit?

In Google Chrome, sometimes you will see the https: protocol in the URL bar with a red strike through it. Clicking on the info button says that not all elements on the page are encrypted, and may be ...
4
votes
6answers
8k views

monitoring outgoing network traffic

The graphs for one server that I am using are showing consistent 7.5 kb/s outgoing network traffic that started a few days ago. How can I monitor/log/capture/analize this traffic to see what is it, ...
-3
votes
2answers
2k views

Could somebody explain the basics of Wireshark to me [closed]

I've downloaded Wireshark, messed around with the GUI a bit and, honestly, I can't make head nor tail of what I am looking at. I understand that Winpcap allows me to create a copy of every packet ...
4
votes
3answers
27k views

Can a hacker sniff others' network data over a wireless connection?

Provided that the hacker knows the WiFi password if any (WEP or WPA), is he capable of sniffing network data of other hosts connected to the same access point?
0
votes
1answer
623 views

Good book about Scapy [closed]

Is there any good learning resources for Scapy apart from the official documentation? I am looking for a good book about the Scapy
4
votes
1answer
385 views

Sniffing IMAPS traffic! Are there any tools for this?

I've got a problem where someone has implemented a custom IMAP Server. I need to write a custom application to get a list of emails, and fetch messages. Problem is, every library I've tried to use ...
7
votes
2answers
8k views

sniffing/recording GSM 3G signals

Is it possible to sniff or record and process GSM 3G signals (from some reciever) given that there is no other signals interrupting etc (the most comfortable conditions) Update (with some supporting ...
2
votes
1answer
410 views

Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool

I've see the PVS (passive vulnerability scanner) from Tenable Network Security. I'm really interested in this kind of approach. Anyone know if is there any FOSS solution to be used professionally ...
10
votes
2answers
639 views

What else can be sniffed?

I'm a pentest newbie. Recently I've learned about sniffing in LANs. From the books and internet resources I'm studying, the sniffing (or packet capture) is always done on either Wired LANs (Ethernet ...
2
votes
3answers
350 views

Sniffing the sniffer

A sniffs B while B is sniffing C. What's the traffic in A? Does A catches both B and C traffic or only B's?
-1
votes
1answer
703 views

Monitor data a program sends to internet [duplicate]

Possible Duplicate: How do i log all my internet-connections I have a program that connects to the Internet, this program apparently is sending out my mac address and computer information ...
4
votes
4answers
12k views

Is there a way to sniff packets of a remote IP address?

I would like to know if sniffing packets of a remote IP address is possibole at all, if yes i would like to know : what is the success rate, i mean by that how much percent of the packets you would ...
16
votes
4answers
1k views

sniffed packets , is there a way to put together the file?

I would like to know, in case an attacker manged to capture some packets from my network traffic, can he build from them a file or any easy to understand thing? I know that the TCP/IP protocol is ...
3
votes
1answer
1k views

ARP-poisoning on wireless network - no packets

I've started working with ettercap and ARP-poisoning; however, I've sumbled upon some problems. I've executed the following command: ettercap -i wlan0 -w log -T -M arp:remote /192.168.1.254/ ...
1
vote
3answers
4k views

Facebook login on HTTP? [duplicate]

Possible Duplicate: Is the Facebook login form using SSL without https in the URL? If you access http://www.facebook.com/, in the top right side there is the login section. You can enter ...
26
votes
4answers
18k views

Does https prevent man in the middle attacks by proxy server?

There is a desktop client A connecting to website W in a https connection A --> W Somehow between A and W, there is a proxy G. A --> G --> W In this case, will G be able to get the ...