Stack Overflow
Stack Overflow

Questions tagged [packet-capture]

is for questions about capturing packets of various protocols that are transmitted over a network.

A lot of computer network protocols transmit their contents in packets. Packet capture is the interception of these packets as they are moved over a network of some type.

A packet sniffer captures raw data traveling over a network segment and saves it to a file for analysis.

Software

A software sniffer can generally only capture network data either originating from or going to the computer running it, plus any "broadcast" messages, if the computer is connected to the network via a switch. If the computer is connected to the network via a router, it may be able to capture network data for any device on connected to the same router.

Hardware

A hardware packet sniffer is physically connected to the network by connecting it to a router or switch. Sometimes the router or switch has to be configured to allow the sniffer to capture traffic being routed through it; this is called port mirroring.

Analysis

The captured data can be analyzed by the software that captured it, or by a program specifically designed to analyze the network data.

See Also

  • Wikipedia Article on Packet Analyzers
  • The term packet sniffer is also common and can be considered a synonym.
659 questions
0
votes
1 answer

what should i learn and look for if i like to build traffic shaper and analizer

i like to add and build something like WIPFW but with traffic shaper option what should i learn in windows driver programing ? is there any code wrappers that can make it easier to program drivers stuff?
user63898
  • 29,839
  • 85
  • 272
  • 514
0
votes
1 answer

Is there a way to capture packets of one specific Android App

I need a way to capture packets of a specific android app and want to save it as a pcap file. I've used Shark for root but can't target a specific app. I've tried using AFWall+ to block all traffic except the one of my specific app but i did get…
f.b.
  • 490
  • 1
  • 5
  • 17
0
votes
1 answer

Wireshark Capture Filter Example

This is with respect to a Wireshark Packet Capture Filter. IP packets whose IP version is not 4 Solution : Filter: ip[0] & 0xF0 != 0x40 ip[0] & 1111 0000 != 64 Could anyone please provide clarity on how the above solution could be…
user5378430
0
votes
1 answer

Linker Error using NetMon API in Visual Studio 2013

I have problems compiling/linking the NetmonAPI in VS 2013. The API comes with installing MS Networkmonitor. Networkmonitor even has a explanation in the help how you can get it to work in VS. I followed the instructions how to set it up, tried an…
kyi
  • 43
  • 1
  • 10
0
votes
1 answer

Does tcpdump supports 10 G data packets to capture?

I want 10G supported sniffer to capture packets.I searched many but i found that the common analyser wireshark doesnot support 10G packets.How to i sniff 10G packets .Is there any tool to sniff 10g data packets. Any ideas or solutions will be…
Tech
  • 51
  • 4
0
votes
0 answers

How to capture mDNS packet using mdnsjava?

Basically, my network has a many device and they all broadcast the mDNS packet. I want to capture the packet and get IP address by parsing it. I tired using mdnsjava but i end up nowhere? Is there any way around for capturing mDNS packet.?
Hitesh Vaghani
  • 1,342
  • 12
  • 31
0
votes
1 answer

How to check if flag in TCP struct is set?

I'm using the pcap C library to read packets. Currently, I use the following to check and see whether a flag in the struct tcphdr (this struct is defined in the netinet/tcp.h library) is set: struct tcphdr *tcp = .... if(tcp->th_flags & TH_SYN) { …
The Legendary Programmer
  • 63
  • 1
  • 7
0
votes
1 answer

Python socket sniffer - Only detects the sent packets

I've wrote a socket sniffer in windows. everything works fine, but the sniffer only detects the sent packets. This is the begining of the sniffer: import socket conn = socket.socket(socket.AF_INET, socket.SOCK_RAW, socket.IPPROTO_IP) …
iYonatan
  • 916
  • 3
  • 10
  • 26
0
votes
1 answer

How to get single packet information through nDPI?

Does anyone know,how to get single packet information through nDPI or any other DPi libraries.
Tech
  • 51
  • 4
0
votes
1 answer

How to validate WLAN QoS frames which do not have a frame check sequence

I noticed that some WLAN QoS frames of the same subtype (e.g. 8) have a FCS and others don't. In both cases the protected flag in the frame control field is set to 1. What drives this difference and how is the integrity of such frames validated?
Thomas
  • 147
  • 1
  • 4
0
votes
1 answer

About deep packet inspection

I need to clarify,Is there any way or tool to capture customized packets and protocols,like whatsapp,skype etc,.I want know is it possible to combine nDPI with libpcap. Thank you,
kumar
  • 1
  • 1
0
votes
1 answer

How to use Wireshark in live mode via SSHFS

I have a remote machine that I run experiments on. On this machine, I want to sniff the packets sent and received. On the machine in front of me, I want to open Wireshark and see the packets live. The only way I have to access the remote machine is…
mrks
  • 8,033
  • 1
  • 33
  • 62
0
votes
0 answers

How do I apply a filter in Wireshark so I can trace a session in which more than one Final-Unit-Indication AVPs have been sent?

I have a capture with some Diameter traffic, my question is if there is any way in which this filtering can be done?
Ronald Hudson
  • 15
  • 5
0
votes
2 answers

how to customize compareTo method to consider both direction flow

if I need to customize my code with this logic if this.srcAddr=other.srcAddr or this.src.Addr = other.sdstAddr this.srcPort=other.srcPort this.srcPort=other.dstPort because I am going to consider bi-directional flow, a packet from source to…
Red Lion
  • 213
  • 3
  • 10
  • 18
0
votes
1 answer

android - monitoring WiFi traffic and packets

I need to write an app which is going to connect to a specific WiFi network (given an IP address/name) and "listen" (monitor) to the network packets under that WiFi. Eventually, I should be able to detect specific packets and act accordingly. I want…
Ofek Agmon
  • 5,040
  • 14
  • 57
  • 101
1 2 3
…
43 44