Getting IP addresses through sniffing [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for … Read more

Why can’t I “decode” packets using Wireshark and some wireless network?

Re, I have no problem capturing packets on various wireless hotspots but there are a couple in my town that I just cannot understand why packets aren’t being captured, other than those of my own. These are “open” networks (i.e., no WEP/WPA/etc. protection) where you obtain a username/password from the administrator, connect and then open … Read more

Suspicious redirection to russian pages. Is government spying us? [closed]

Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it’s on-topic for Server Fault. Closed 10 years ago. Improve this question Recently when I browse some multi-language websites, the default language becomes Russian. An example is www.amd.com which redirects me to http://www.amd.com/ru/Pages/AMDHomePage.aspx I am … Read more

Log http data in unique files using tcpick

I’m trying to use tcpick to log http data in unique files (client and server mixed together). This is one of the examples from tcpick‘s man page: $ tcpick -i eth0 “port 80” -wRub I expected this to write the tcp stream to a file named <ip_client>_<ip_server>_<port_server>.tcpick, but it seems that no file gets written … Read more

In the output of Chaosreader, where are the source and destination port numbers and IP addresses for each packet?

I used this tutorial to use Chaosreader on an output file of WinDump. My purpose was to get the HTTP payload, which I got. But I’d also like to extract other information, like source IP and destination IP, source port and destination port, for each packet in the WinDump output file. How do I get … Read more

Error 10061: No connection could be made because the target machine actively refused it

I have recently installed a (cross platform) client server application consisting of a web server backend and a thick (dumb) desktop client. I have been able to connect to the server and run the Ubuntu desktop client successfully, however, when a colleague installed the client application on their Windows 10 laptop, the got the following … Read more

How to trigger DHCP request and inspect the reply from DHCP server

Is it possible to trigger a DHCP request from my DHCP server and then sniff and inspect the whole DHCP reply from the server to see what options/parameters it sends to the clients? Answer Assuming Windows: Run Wireshark. Do ipconfig /release followed by ipconfig /renew on the command line. AttributionSource : Link , Question Author … Read more

How to perform Wiresharks File->Extract Objects->HTTP through Tshark commandline interface?

Using TShark, I want to be able to extract the payload in HTTP response from packets data captured through tshark in a .pcap file. In the Wireshark GUI, I was able to do that by File > Extract Objects > HTTP, and then choosing a file from the HTTP Objects dialog (which shows a list … Read more

Is it possible to sniff packets of other users on connected over LAN in a workspace or college lab? [closed]

Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it’s on-topic for Server Fault. Closed 2 years ago. Improve this question I am asking this (for educational purposes) to be alert if this kind of thing happens to me. Answer It depends on the … Read more

Problem with WireShark (MySQL sniffing)

How can I snif MySQL data using WireShark? Also I used «mysqlsniffer» and have no results. There are no any packets from MySQL. I’ve filtered by «MySQL.isPresent» in WireShark but nothing happened. MySQL installed on Ubuntu 10.10 from repository. Here is my.conf: http://pastebin.com/jkJU773E Also I can telnet to MySQL: halo@desktop:~$ telnet localhost 3306 Trying ::1… … Read more