Questions tagged [packet-capture]

is for questions about capturing packets of various protocols that are transmitted over a network.

A lot of computer network protocols transmit their contents in packets. Packet capture is the interception of these packets as they are moved over a network of some type.

A packet sniffer captures raw data traveling over a network segment and saves it to a file for analysis.

Software

A software sniffer can generally only capture network data either originating from or going to the computer running it, plus any "broadcast" messages, if the computer is connected to the network via a switch. If the computer is connected to the network via a router, it may be able to capture network data for any device on connected to the same router.

Hardware

A hardware packet sniffer is physically connected to the network by connecting it to a router or switch. Sometimes the router or switch has to be configured to allow the sniffer to capture traffic being routed through it; this is called port mirroring.

Analysis

The captured data can be analyzed by the software that captured it, or by a program specifically designed to analyze the network data.

See Also

  • Wikipedia Article on Packet Analyzers
  • The term packet sniffer is also common and can be considered a synonym.
659 questions
3
votes
2 answers

Unicode HTTP Host: Header Field?

What does the Host: header look like for a Unicode domain. e.g. æon.com in the MOST STANDARD format (assuming RFC 5987? or is it something else?)? I am developing a transparent proxy that will need to work across different browsers and…
unixman83
  • 9,421
  • 10
  • 68
  • 102
3
votes
1 answer

802.11 header mismatch - pcap

I'm capturing wirless frames the first structure i'm using is struct mgmt_header_t { u_int16_t fc; u_int16_t duration; u_int8_t da[6]; u_int8_t sa[6]; u_int8_t bssid[6]; u_int16_t seq_ctrl; }; but this header…
cap10ibrahim
  • 587
  • 1
  • 6
  • 16
3
votes
0 answers

How to get raw packet data using windows pktmon in realtime

I am trying to use pktmon.exe to capture and log network packets in real-time. Though pktmon gives the hex of payload output in its .txt and .pcapng files when log-mode is not set to real-time, but when I try to get the log in real-time, I only get…
3
votes
4 answers

how to capture all packet size using windows pktmon

I am trying to use pktmon(built-in windows packet analyzer). However from the documentation they mention that by default packet size is limited to 128 bytes but can be increase with the following command pktmon start --etw -p 0. But running that…
Mario
  • 53
  • 5
3
votes
2 answers

Python Packet Sniffer

What Python module should I be using to sniff packets? I don't need anything too complex, I just need to get the data out of some packets being sent to my computer. I am using Python 2.6 and Windows 7, and I have installed WinPcap 4.1.2. So far…
gwenger
  • 1,211
  • 3
  • 12
  • 11
3
votes
1 answer

Capture the traffic generated by a browser using wireshark

How can I capture only the traffic generated by a web browser using Wireshark?
Ala Jebnoun
  • 65
  • 1
  • 10
3
votes
2 answers

How to read all SSL traffic from Android phone?

I would like to be able to read traffic of my Android phone to see what data it's sending. It is running Android 9. I have been able to use Charles but it can only read traffic that doesn't have SSL. It seems that if I was testing my own application…
spectops1904
  • 61
  • 1
  • 1
  • 3
3
votes
1 answer

PACKET DROPPED - Finding out which packets are dropped?

How do I print which packets are dropped by by the interface ??? I have an interface wherein RX packets are dropped , see below : eth0 Link encap:Ethernet HWaddr DE:AD:BE:EF:42:46 inet addr:192.168.122.86 Bcast:192.168.122.255 …
Onkar Mahajan
  • 944
  • 2
  • 13
  • 16
3
votes
2 answers

Packet capture tools for Nokia N8 (symbian ^3) Phones

Are there any packet capture tools (like tcpdump and wireshark) for Nokia N8/ symbian ^3 phones! I am currently working on my thesis and have almost done with the application layer behavior using JavaScript but am required to study the network…
sashar
  • 51
  • 1
  • 8
3
votes
0 answers

Get Header and Request Body from Microsoft Network Monitor 3.4

I need to read the requests and responses from a particular desktop app, I have been able to capture requests and responses from Microsoft Network Monitor. How can I get the Headers and Response Body like Postman. I need to stimulate similar…
3
votes
2 answers

Test tool for streaming RTP to specific ports

Does anyone know of any tests apps out there (or even libraries that can be used to build one) that let you simply send some G.711 RTP packets out to a specific port? I don't care about the audio content, I literally need some test RTP to make sure…
Adam Cobb
  • 894
  • 4
  • 14
  • 33
3
votes
1 answer

Listen to ARP broadcast in Java

Can someone please guide me on listening to ARP broadcasts in Java?
3
votes
2 answers

Perl packet crafting and injection module

Could someone provide if there are a perl packet crafting and injecting module that works on windows xp sp2 or windows vista , if not could someone provide which libraries i need to build such tool ?
Mars
  • 31
  • 2
3
votes
3 answers

How to export printable text only(or any other packet property) in wireshark

Long story short - I'm capturing SQLs from vendor tool to Oracle database by using Wireshark. It already has decoder for TNS protocol (which is great) and I can access text of SQL by Right Click->Copy->Bytes(Printable Text Only). The problem is…
Petro Semeniuk
  • 6,970
  • 10
  • 42
  • 65
3
votes
1 answer

Is it possible to base64 decode part of a base64 encoded message

I am working on a project where I am getting parts of base64 encoded data, but not the whole thing. Is it possible to figure out what that part of the base64 encoded data was? For example. Say I base64 encode hello world It becomes…
MikeSchem
  • 950
  • 2
  • 16
  • 29