Questions tagged [packet-sniffers]

A software or a piece of computer hardware that can intercept and log traffic passing over a digital network or part of a network

packet-sniffers
Filter by
Sorted by
Tagged with
150 votes
9 answers
245k views

Wireshark localhost traffic capture [closed]

I wrote a simple server app in C which runs on localhost. How to capture localhost traffic using Wireshark?
Udara S.S Liyanage's user avatar
14 votes
2 answers
10k views

Strange RAW Socket on Mac OS X

When i run a simple packet sniffer coded in C on my Mac OS X, i got no output at all, this is a strange thing! can someone help me to understand what going on. #include <stdio.h> #include <...
funnyCoder's user avatar
61 votes
5 answers
57k views

Sniffer for localhost (Windows OS) [closed]

I am looking for a sniffer that can work with the loopback address in Windows. So far, I found Microsoft Network Monitor which is a nice tool, but for localhost it's useless because on Windows, ...
citn's user avatar
  • 1,532
52 votes
6 answers
68k views

How to test which version of TLS my .NET client is using?

I support a .NET site which (amongst many, MANY, other things) talks to remote APIs from supplier systems. We want to upgrade to support TLS 1.2 We're hoping to do so as per this question: Are there ....
Brondahl's user avatar
  • 8,073
18 votes
3 answers
48k views

How to intercept packets sent by an application and check their header and content? [closed]

I'd like to know how can I intercept packets sent by a certain application and then to check what those packets contain. I need some advice what to do because I've never done such a thing and I want ...
Jax's user avatar
  • 987
5 votes
4 answers
7k views

How do I programatically collect packets from passively sniffing? [closed]

I want to test the vulnerability of the server I just wrote against man in the middle attacks. How (on Mac OS X) do I analyze packets. (I'll be checking where they are going, pulling information ...
NullVoxPopuli's user avatar
1 vote
1 answer
4k views

Can't use Interceptty or slsnif to sniff data sent via serial port

I want to determine exactly what data is sent by a controller to a off-board motor controller that has its own processor. I have not had success with plain text commands or json commands either. There ...
evan's user avatar
  • 189
78 votes
9 answers
187k views

Sniffing an Android app to find API URL

I'm curious as to how I could figure out the API URL an Android application (any app I have installed) uses if it makes API calls to some online server (a RESTful service for example). I presume I ...
derpyderp's user avatar
  • 946
69 votes
10 answers
135k views

iPhone and WireShark [closed]

How can I sniff packets from my iPhone on my network? can someone give me some instructions? I tried Googling, but nothing teaches how to sniff iPhone packets、 I am on windows.
Strawberry's user avatar
2 votes
1 answer
247 views

Why am I getting an exception on Windows 8 using raw sockets with IPPROTO_TCP?

I was playing with raw sockets on my Windows 8 machine. I created a socket as follows: s=socket(AF_INET,SOCK_RAW,IPPROTO_TCP) s.bind((gethostname(),0)) s.ioctl(SIO_RCVALL,RCVALL_ON) But on binding ...
Grewal Grewal's user avatar
58 votes
6 answers
81k views

Bluetooth sniffer - preferably mac osx

I am trying to find a bluetooth packet sniffer to capture bluetooth signals from close by devices. I would like for this application to work on mac osx. I have had difficulty finding anything at all ...
Jim's user avatar
  • 581
17 votes
7 answers
23k views

Is there an API for Wireshark, to develop programs/plugins that interact with it/enhance it? [closed]

Googling didn't give me great results. Is there any sort of API for Wireshark that abstracts away from the main source code so we can develop programs that interact with it and deal with the data it ...
jim's user avatar
  • 191
15 votes
1 answer
8k views

Should data in an HTTPS request appear as encrypted in Chrome developer tools?

I'm trying to get a better understanding of how SSL works so I installed a self-signed SSL cert on my server for testing. When I post data to an HTTPS url on the test server, Chrome developer tools ...
Choy's user avatar
  • 2,117
7 votes
1 answer
11k views

how to add http headers to a packet sniffed using scapy

I am trying to sniff an out going http packet using scapy, add a few new http headers in it and send it ahead. The intention here is to only insert new headers while keeping the packet intact. At max ...
fkl's user avatar
  • 5,472
6 votes
4 answers
32k views

Identify a non-computer network device?

I'm current working on a program that scans my network and discoveres computers and devices on the network. I use various operations to find data on the devices I discover, but want to distinguish the ...
Avilan's user avatar
  • 161
5 votes
3 answers
13k views

Packet Sniffing using Raw Sockets in Linux in C

I need to write a packet sniffer in Linux that detects HTTPS packet that are sent and save the url from the request. I found code for this in security-freak and ran it. This code runs and only sniffs ...
Sajad Bahmani's user avatar
3 votes
2 answers
6k views

writing an ethernet bridge in python with scapy

I'd like to make something like this: 10.1.1.0/24 10.1.2.0/24 +------------+ +------------+ +------------+ | | | | | | | ...
mgalgs's user avatar
  • 16.2k
2 votes
3 answers
8k views

Firefox's geo.wifi.url's https://www.google.com/loc/json not used?

I used a network sniffer and examined all the requests going out from Firefox when going to http://html5demos.com/geo. According to my Firefox, the geolocation service according to geo.wifi.uri entry ...
Tony_Henrich's user avatar
  • 43.5k
2 votes
2 answers
8k views

Any good .net packet sniffers around? [closed]

I am looking for one to use from my c# application. Anyone knows a free one?
devoured elysium's user avatar
0 votes
2 answers
7k views

http trace utility

I need to trace/sniff http traffic from other machines (for example from my android phone or ios device). In the past I used MSSOAPT (described here http://www.devproconnections.com/article/net-...
zebra's user avatar
  • 1,340
19 votes
1 answer
20k views

Capture network traffic programmatically (no root)

I'm trying to find resources or library which could permit me to capture the traffic of all the network packets of a device programmatically either it be from wifi or mobile network. I believe there ...
E-Kami's user avatar
  • 2,569
18 votes
1 answer
21k views

scapy get packet's arrivals time

Is there a way to get the packet's arrivals time using scapy? Using scapy to read the pcap file and I want to know all the packet's arrivals time because as we know wireshark can see it. So I guess ...
leong's user avatar
  • 313
14 votes
1 answer
12k views

pcap_loop and pcap_dispatch Difference

What exactly is the difference between pcap_loop and pcap_dispatch?
Karthick's user avatar
  • 2,854
13 votes
2 answers
20k views

c# - how to sniff packets in an app without relying on WinPCap?

BACKGROUND: I now understand how to write a C# application that can monitor packets going in/out of the network card on the PC the application is running on. The approach I know relies on http://www....
Greg's user avatar
  • 34.5k
12 votes
1 answer
28k views

Packet capture app once started doesn't have internet connectivity for other apps anymore

I have installed packet capture on my android phone - Samsung Galaxy S7 edge running Android version 8.0. It is not rooted I followed all the steps and installed the SSL cert as well. Here is the ...
StackOverflowVeryHelpful's user avatar
12 votes
2 answers
15k views

Understanding Tcpdump filter & bit-masking

I am trying to sniff the http headers by using tcpdump. This filter works well but I can't understand it - (((ip[2:2] - ((ip[0]&0xf)<<2)) - ((tcp[12]&0xf0)>>2)) != 0) I've ...
kingasmk's user avatar
  • 2,013
10 votes
2 answers
8k views

How can I determine which packet in Wireshark corresponds to what I sent via Postman?

I'm trying to figure out why REST calls sent from my handheld device (Windows CE / Compact Framework) are not making it to my server app (regular, full-fledged .NET app running on my PC). The ...
B. Clay Shannon-B. Crow Raven's user avatar
7 votes
2 answers
12k views

when is the push flag set in tcp segment

i asked this previous question here: tcp two sides trying to connect simultaneously i tried the method given in the solution and while sending while using netcat and sniffing packets with ethereal i ...
Rohit Banga's user avatar
  • 18.6k
6 votes
2 answers
9k views

How to get data from TCPPacket using SharpPcap?

I need small sniffer for my report so I went with C# and SharpPcap. packet = Packet.ParsePacket(rawCapture.LinkLayerType, rawCapture.Data); tcpPacket = TcpPacket.GetEncapsulated(packet); I have raw ...
jM2.me's user avatar
  • 3,909
6 votes
6 answers
19k views

How to sniff http requests

I want to sniff a local HTTP request to an ASP.NET web application. Is telnet an option? How do you capture packets to a web application?
Costa's user avatar
  • 4,017
5 votes
1 answer
4k views

Using RawCap to Sniff localhost on Windows XP, SP3

I am attempting to use RawCap to sniff Windows localhost. However, contrary to its billed ability to do so, it is not working. I am starting it as follows: rawcap 127.0.0.1 echo.pcap I then run a ...
Dave's user avatar
  • 1,605
5 votes
2 answers
9k views

How to filter by ethernet MAC address

The following code: sniff(filter = "dst aa:bb:cc:dd:ee" ) throws an error because sniff is expecting an IP, not a MAC. So how are you supposed to filter by MAC?
bzupnick's user avatar
  • 2,686
4 votes
3 answers
7k views

Packet filtering in Windows (XP, 7 etc)

How can i filter (allow, deny etc) outgoing packets in Windows? I want to search in TCP or UDP packet types to find in the data segment for example this "...
Skoupidi's user avatar
3 votes
2 answers
3k views

How can you access the packet information in a JpCap Packet

How can I pull relevant packet information from a JpCap packet? I am trying to find the source/destination ip and port. So far I have tried string parsing the Packet's toString() method, but that ...
Mantas Vidutis's user avatar
3 votes
1 answer
5k views

How to sniff non-http traffic (sockets) on Genymotion/Android Emulator?

I'm trying to reverse engineer one Android app's traffic and it's using sockets, xmpp or something else, but not http(s) on some features. I know this because Charles does not see some requests, but ...
Gintas_'s user avatar
  • 5,000
3 votes
1 answer
7k views

HTTPS sniffing/Charles SSL doesn't work on Facebook

Charles SSL works on basically any other app or website except Facebook. I have installed all the certificates on iOS devices, but when sniffing Facebook only, I always get status Failed when method ...
Gintas_'s user avatar
  • 5,000
3 votes
2 answers
20k views

Don't know why I'm getting Error Code 10022 (Invalid Argument) when setting socket options in my C# sniffer

I'm writing a packet sniffer as an exercise in learning .Net 4 socket development on in C#. My goal is to sniff IP packets coming in and out out my computer. My problem is that I'm getting error ...
Don's user avatar
  • 789
3 votes
2 answers
5k views

Sniffing packets on localhost with Scapy

I'm learning how to use scapy to sniff packets. I have set up a simple echo server running on localhost on port 50420. I then enter the following line in my terminal to sniff for packets on that ...
freedomflyer's user avatar
  • 2,531
3 votes
1 answer
1k views

Connect to internet using wlan0 and channel hopping mon0 as Monitor [closed]

I was given a project to count the number of Wifi devices in a room and my research led me to getting an TL-MR3020 and installing OpenWRT on it. I can set up mon0 in Monitor Mode just fine airmon-ng ...
Sheridan Gray's user avatar
3 votes
2 answers
5k views

When to use ntohs and ntohl in C?

I'm very confused in when to use ntohs and ntohl. I know when you use ntohs for uint16_t and ntohl uint32_t. But what about those with unsigned int or those where a specific amount of bits is ...
Yahya Uddin's user avatar
  • 27.9k
3 votes
2 answers
21k views

Simple Raw Packet Sniffer In Python

First, I'm a beginner in python. I developed a simple raw packet sniffer utilizing the PF_PACKET interface that operates at layer 2. The sniffer simply figures out the following... - Ethernet Header (...
user3490561's user avatar
2 votes
1 answer
1k views

How to configure Packetbeat to sniff "any" devices on Windows?

The documentation for Packetbeat is pretty straightforward and says it very clearly as stated below On Linux, you can specify any for the device, and Packetbeat captures all messages sent or ...
Abhi's user avatar
  • 334
2 votes
1 answer
312 views

postgreSQL function call packet

As postgreSQL documentation says about it's packets here a function call must send a packet with 'F' identifier to server. So I defined a simple function and called it with select statement and after ...
HMD's user avatar
  • 2,212
2 votes
1 answer
9k views

Using wireshark on the pc to monitor traffic on the Android phone

In order to learn how other applications connect to internet services I would like to monitor the traffic via Wireshark on my Linux PC. I know there are Wireshark tools for Android, but these require ...
marlar's user avatar
  • 3,976
2 votes
1 answer
4k views

how to solve errors like ‘struct iphdr’ has no member named ‘daddr’

I ran a program ( the link is - http://www.security-freak.net/raw-sockets/sniffer_eth_ip_tcp.c ) in my fedora core 5. On compilation , i get the following errors : [root@localhost ~]# gcc ...
trinity's user avatar
  • 10.5k
2 votes
1 answer
1k views

Testing Adobe Analytics Instrumentation with Python

I'm attempting to automate tests of Adobe Analytics (aka Omniture) instrumentation of a web app by implementing test scripts with the Selenium Python package. If correctly instrumented, HTTP requests ...
Christian Ulstrup's user avatar
2 votes
2 answers
642 views

Why does a PF_PACKET RAW socket stop missing packets after "Wireshark" was launched?

I need to receive incoming UDP packets using RAW socket, which is being opened using this code snippet: static int fd; char *iface; iface = "eth0"; if ( (fd = socket(PF_PACKET, SOCK_DGRAM, htons(...
user5232274's user avatar
2 votes
6 answers
4k views

writing a http sniffer

I would like to write a program to extract the URLs of websites visited by a system (an IP address) through packet capture.. I think this URL will come in the data section ( ie not in any of the ...
trinity's user avatar
  • 10.5k
2 votes
3 answers
8k views

Writing an http sniffer (or any other application level sniffer) [closed]

I am trying my hands understanding PCAP libraries. I am able to apply a filter and get the TCP payload at port 80. But what next ? How can I read the HTTP data - suppose I want to know the "User Agent"...
Ishi's user avatar
  • 367
2 votes
1 answer
7k views

Modify packets on the fly with Scapy?

Is it possible to do this? from scapy.all import * def action(packet): print packet[0][1].src + "==>" + packet[0][1].dst print "Rerouting to localhost" packet[0][1].dst = '127.0.0.1' ...
Takkun's user avatar
  • 6,251