How can i track which program sends data over my network and can i see the contents of it?
If we have a AV software installed in a VM , can we see what it's sending from your pc when doing a scan?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
With wireshark you can see all the incoming/out-coming traffic at your network. You can install wireshark at your vm.
It shows you a breakdown for every packet being exchanged from your network, you can see all the information of that packet including
protocol being used etc.
Once you've found a suspicious packet you can
right click it -> follow stream which will show you the entire exchange of packets between your computer and the target server.For every packet you can see its payload,which is the actual content of the packet.
The payload will be in HEX form and possibly encrypted which is a downside at tracking exactly what information is sent.