-1

I am trying to Capture all TCP traffic to/from Facebook, during the time when i log in to my Facebook account using this "tcp and host 157.240.23.35" capture filter, but it is not capturing any packets.

I found the ip address of Facebook on cmd using "ping facebook.com".

I even tried disabling and enabling the promiscous mode both but still no packets. Please help.

vansika
  • 55
  • 1
  • 2
  • 7

2 Answers2

0

Facebook has many thousands of IP addresses, and many subnets. You will not be able to do a simple capture on a single IP address, nor even on a single subnet.

Bib
  • 922
  • 1
  • 5
  • 10
0

Facebook IP address rage is available here: https://gist.github.com/Whitexp/9591384

You can use range command in Wireshark instead of single IP address.

For example:: ip.addr==31.13.24.0/21 || ip.addr == 31.13.64.0/19

enter image description here

Since the list contains many subnets, I have shown only two. You can find the updated subnets on internet and modify the filter accordingly.

For example:: ip.addr==31.13.24.0/21 || ip.addr == 31.13.64.0/19 || ip.addr == (IP address range 3) || ip.addr == (IP address range 4)

Prasad 14723312
  • 539
  • 1
  • 3
  • 14