2
votes
3answers
346 views

Watching for applications like WireShark and other eaves dropping on corporate network

Are there ways to monitor and check for network monitoring like WireShark? Or would it just be more ideal to ensure every application uses SSL to ensure no employee or anyone could packet sniff ...
2
votes
2answers
137 views

wireshark does't show HTTP requests from other devices

My machine along with several other machines are connected to wireless router. When i open some http page on same machine(M1) where wireshark is installed, it captures the packets such as HTTP GET or ...
0
votes
1answer
70 views

Why do I get all of these bad header checksum messages?

Every time I open my browser, I get tons of these bad header reports. What does this stem from?
1
vote
4answers
278 views

Can Your ISP use a Packet Sniffer? [closed]

Can ISPs presumably use packet sniffing applications such as wireshark and monitor my unencrypted data? Are they "allowed" to do so?
0
votes
1answer
318 views

What utilities can be used for Ping of death attack?

Can somebody tell me what program can mess with pockets and enlarge them for Ping of death attack? (i need it for lab) Is there anywhere step-by-step instructions of this attack? I'm not a hacker ...
10
votes
4answers
1k views

Is my network being sniffed?

Is there any way to find out if someone who is connected to my network is sniffing packets? There is a way with nmap if his card is in promiscuous mode but what if it is passive?
-2
votes
2answers
132 views

What does capture filter means in wireshark? [closed]

What does capture filter means in wireshark? Is it same as display filter?
1
vote
1answer
302 views

Wireshark detecting suspicious messages through jabber protocol, It says it is from my website, no idea what it is

I was doing a network scan on my computer with Wireshark and came up with something very suspicious: I found a stream with the jabber protocol. I do not have a jabber server set up nor do I have any ...
3
votes
3answers
283 views

How to diagnose and handle unexplained open network connections?

I was using Wireshark in order to check the activity of an unknown client in my home network, and to my surprise, I found some strange connections established by my own computer. I disconnected all ...
1
vote
1answer
293 views

Is suspicious network activity likely to be caused by a rootkit?

Netstat has been one of my favorite tools to check out possible malicious connections, but then I heard about the dangers of rootkits and their high complexity, allowing them to be able to bypass ...
0
votes
2answers
104 views

Display all packets but not these TCP packets? [closed]

I'm trying to filter packets with wireshark, I would like to display all packets but terminal service communications, but if I do: tcp.dstport != 3389 && tcp.srcport != 3389 It would ...