A sniffer is a program that monitors and analyzes network traffic, detecting bottlenecks and problems.

learn more… | top users | synonyms

2
votes
2answers
404 views

how to find out if a program sends data to internet (without permission)?

We have an application to save our customers data (some kind of CRM). This application has been written in Delphi and is a client/server application. This program apparently is sending out ...
1
vote
4answers
804 views

Can Your ISP use a Packet Sniffer? [closed]

Can ISPs presumably use packet sniffing applications such as wireshark and monitor my unencrypted data? Are they "allowed" to do so?
0
votes
1answer
290 views

Fishy: VMware sends all traffic through akamai

I'm running Linux inside of VMware on the Mac, and on Linux I'm running a program that has connections open to perhaps 4 different machines. On the OS/X side however VMware has only 1 active network ...
0
votes
1answer
120 views

SSL and Strategy to prevent destination URL from being revealed

Googling the subject "sniffing out / spying on SSL secured communications" one finds many references to being able to make some good guesses about the "target destination" once the path length is ...
2
votes
1answer
205 views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If ...
0
votes
1answer
161 views

TCP IN connection from another user in my home network. Is it safe?

I'm using Comodo Firewall and I noticed that sometimes I'm getting TCP IN connection from another IP address in my home network (only one router and few wireless users): TCP IN | 192.168.1.50 | ...
4
votes
4answers
486 views

Is packet sniffing a risk on VPS? If so, what precautions should I ask my host if they take?

I'm wondering if packet sniffing is a risk on my VPS. Is it always a risk or are their precautions a host vendor can take? e.g. a switched network etc. If I wanted to ask my host what precautions ...
3
votes
3answers
3k views

Alternative to AirPcap for Linux?

I need to sniff WiFi packets, but according to AirPcap FAQ page, it just supports Microsoft Windows, not other platforms. Does any alternative of this product work in Linux? Please don't offer Alfa ...
0
votes
1answer
333 views

Can you sniff broadband connections? And how you secure that?

I know that you can sniff data which is transferred over wifi. Can you do that with broadband (wired)? And how can you secure the network, so nobody could sniff data both over wifi, and broadband?
2
votes
2answers
2k views

Sniffing From Squid SSL

I created a Squid proxy and a self-signed SSL certificate. The SSL certificate on the server is a private certificate linked to the ssl-bump feature. I am using tshark to dump the SSL traffic, but I ...
0
votes
2answers
1k views

Cain and Abel Sniffing vs APR

I have recently been performing a security audit at work (sanctioned of course) and have seen some interesting behaviour from Cain and Abel. I've purposefully avoided using APR so that my co-workers ...
2
votes
4answers
2k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
3
votes
1answer
562 views

I recently discovered that dsniff had been installed on my computer. What do I do?

I have recently discovered that a co-worker (who has sudo privileges on my machine) has installed dsniff, and it has been there for a while. I have no idea when they ran it (if at all), the only ...
3
votes
1answer
4k views

Which part of the eapol packets contain WPA password Hash?

I have captured wifi traffic from a WPA network using Wireshark. I filtered the results for "eapol" packets and noted in the info column there are message type 3 and type 1. I believe this is two ...
3
votes
1answer
564 views

Does Metasploit's packet sniffing run in promiscuous mode?

I'm doing an educational pen test exercise and I'm trying to sniff traffic from a compromised Windows machine. I've been using the post-exploitation sniffer and packetrecorder Meterpreter modules, ...
22
votes
2answers
8k views

How is wireless WiFi password cracked?

Let's say I have a wireless network that is password protected. What procedures can an intruder take in order to be able to gain access to my wireless network, or at least be able to decipher the ...
3
votes
2answers
7k views

How to sniff Bluetooth traffic using Android?

I have two Arduinos using Bluetooth to communicate one with another. Is it possible to sniff the Bluetooth conversation between the two devices? An Android solution would be great, I heard of hcidump ...
2
votes
1answer
667 views

How to identify call stats about 2/3/4G users in a room?

If someone can please provide some advice about the following problem I am trying to solve it will be great. Scenario: A standard office room, with (say) a couple of people in it What I want to find: ...
22
votes
2answers
1k views

Can a connected USB device read all data from the USB bus?

Is it possible for a (malicious) (hardware) USB device to access all the data that is transferred through the USB bus and then read/store this information, essentially sniffing all transferred data? ...
5
votes
1answer
1k views

is it possible to sniff email content inside network?

I am working in a IT company. I am using LAN for all internet activities. I send some email from my personal gmail account. My network administrator sniffed all email I send from LAN and he shows the ...
2
votes
1answer
552 views

Protect an application that uses internet from packet sniffing

I developed a stand alone application such a way that, application use a remote service (using SOAP/REST) which available WWW. I am using HTTPS though out the application calls. It was perfectly ...
-3
votes
1answer
594 views

How to convert some packets in a readable format [closed]

I am looking for a tool for osx, that can convert this raw data in some readable format. Testing my wifi network, I began sniffing my packets, and ran tcpflow -i en1 -c I want to get the sniffed ...
22
votes
2answers
5k views

What is the difference between Promiscuous and Monitor Mode in Wireless Networks?

In Wireless Networks, you can put your wireless card in Promiscuous or in Monitor Mode. What is the difference between these two modes ?
0
votes
1answer
1k views

What's the best route to watch network traffic on our networks?

We have a single switch that routes all our different offices around the country using Meraki VPN. We have a VM on the switch (to the extent it can see all subdomains and different IP addresses in our ...
1
vote
2answers
10k views

How can I monitor traffic of devices on my WiFi? [closed]

I have my kids cell phones attached to my router. What can I install to view what they are browsing and the media they have? I want to make sure my kids are safe
2
votes
1answer
673 views

Reassemble sniffed packets [closed]

I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the ...
3
votes
2answers
3k views

how to monitor a Wifi (802.11) network?

How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
0
votes
2answers
146 views

How to know what domains other clients visit if I have no access to the router?

As a client computer, I am behind a router to which I have no access. Is it possible for me to know the domains or IP addresses that other clients visit? I want to know which clients often download ...
6
votes
2answers
2k views

How to hack a switch connected network with static ARP?

For example, if there is a network with three computers connected to the same switch, Alice, Bob, and Eve. If Alice and Bob add each other on their own ARP list as a static ARP entry, and Eve wants to ...
0
votes
2answers
10k views

Can wifi administrator see data transfer over android phone. precisely gmail app communication

sometimes I connect to wifi outside my home in office , restaurants and friends house. I want to know if wifi administrator can see the exact data my android phone communicates? I am only concerned ...
1
vote
1answer
2k views

How does wireshark detects online-messenger traffic?

I have been working on how to find use of online messenger (e.g imo.im, ebuddy) using wireshark. I'm doing , as i need to build SIEM (security information event management) use-cases which detects ...
10
votes
4answers
8k views

Security measures against packet sniffing

I work in a environment where packet sniffing can be easily done . I was worried about my confidential data . Please suggest how is it done and precaution which i can take at client level.
1
vote
3answers
301 views

Any one know about UDP traffic on source port 26221?

On my captured network traffic i observe a flow having a source udp port of 26221 and have different destination udp ports. Some of these destination ports were standards IANA ports. The average ...
1
vote
1answer
524 views

What's most standard way to secure internet connections and protect privacy?

It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
4
votes
1answer
575 views

Trying to figure out Gmail login in Wireshark

In my pentesting lab I'm using ettercap for do a mitm to a XP VM. I go to gmail, accepting the false certification, and here I start to sniff with wireshark. I put some false account like ...
2
votes
4answers
523 views

Which Wifi encryption method is secure?

you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
6
votes
3answers
3k views

Capturing and decrypting my own SSL traffic

When I use browser or wget to access another site, some sites will only use HTTPS / SSL automatically. When a site doesn't provide content without encryption, how do I capture what my computer sends ...
0
votes
1answer
179 views

How do the authorities know who's downloading protected software?

Out of curiosity do the web based file hosting services such as Oron and Rapidshare store information about who downloads what? I ask because I'm wondering, when someone is "caught" downloading ...
10
votes
3answers
11k views

How can I detect if someone is sniffing network packets on the LAN?

I would like to know if there is a product or software that can detect if there is a sniffer currently on the network? In other words is it possible at all to detect if there is a network card on ...
0
votes
2answers
1k views

Weird IP addresses showing up on my server

I have a personal server located in the US, I use it to execute code which requires a lot of resources. I sometimes have apache running on my server, to test php code. I recently left my apache server ...
2
votes
3answers
3k views

TOR and sniffing data

If I'm not mistaken, TOR works opening a random anonymous path between two hosts using others computers that have TOR installed no? Then... everybody can sniff the data of the others no? Just wait ...
0
votes
0answers
39 views

Sniff GSM packets Wireshark [duplicate]

Possible Duplicate: Smartphone / GSM Sniffer I noticed in a video on youtube is possible to sniff gsm traffic using wireshark. How is this possible ? Do I need a GSM modem to acheive this ...
3
votes
3answers
1k views

sniff SSH password on the server

Is it possible on the server to log the password encoded by the remote user inside a log. I want to make a honeypot to see the type of user/password used.
6
votes
2answers
527 views

Suspicious 'upstream' traffic

We are seeing unusual amounts of traffic heading upstream on our WAN connection, during the day our system can exceed (or attempt to exceed) the 1Mbps limit imposed on the connection. I have PRTG ...
1
vote
1answer
190 views

Will packet sniffing still work if all connections go through a local proxy?

Will packet sniffing work if all connections use a local proxy? You are forced to use this proxy to get a connection to the internet at all.
2
votes
1answer
2k views

Should we block all plaintext authentication and require authentication over an encrypted channel?

Should we configure our servers to require the authentication happen over an encrypted channel and block all methods of unencrypted, plaintext authentication over? I recently configured my servers to ...
3
votes
2answers
631 views

Electromagnetic induction attacks - reverse TEMPEST?

I know that electromagnetic emissions from a device can be used to extract information from a system, e.g. TEMPEST or Van Eck phreaking. I also know it's possible to induce a signal into a ...
5
votes
1answer
660 views

How do you analyze an unknown network protocol?

Of course Wireshark can be used to sniff traffic - you can inspect each packet or chain of packets. But how would you do it smarter? Which tools do you use to identify behaviors or to automate the ...
3
votes
1answer
237 views

Equipment required for sniffing data / address buses via EM emission

What kind of equipment would be required to sniff data from the electromagnetic emissions of data / address buses on an average motherboard? I'd imagine a sensitive hall probe, a faraday cage and ...
0
votes
1answer
432 views

Can the FiddlerCore library be used for Malware (e.g. MitM attacks)?

I've used the excellent Fiddler web debugging software before and have recently come across the Fiddler Core headless .NET library which gives you all the abilities of Fiddler in library form. It's ...