Check network traffic to/from your computer

Printable View

10-04-2009, 07:56 PM
N1LAF

Check network traffic to/from your computer

Checkout Wireshark! And it's free. Available for Windows, LINUX, OS X

http://www.wireshark.org/

About Wireshark

Wireshark is the world's foremost network protocol analyzer, and is the de facto (and often de jure) standard across many industries and educational institutions.

Wireshark development thrives thanks to the contributions of networking experts across the globe. It is the continuation of a project that started in 1998.

Features

Wireshark has a rich feature set which includes the following:

* Deep inspection of hundreds of protocols, with more being added all the time
* Live capture and offline analysis
* Standard three-pane packet browser
* Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
* Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
* The most powerful display filters in the industry
* Rich VoIP analysis
* Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
* Capture files compressed with gzip can be decompressed on the fly
* Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)
* Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
* Coloring rules can be applied to the packet list for quick, intuitive analysis
* Output can be exported to XML, PostScript®, CSV, or plain text
10-04-2009, 07:59 PM
W4GPL

Re: Check network traffic to/from your computer

+1

Wireshark is fun near open wireless access points too -- or so I've heard. :snicker: I (in theory) would use airodump-ng to capture the data and analyse it with Wireshark. It's amazing how many people check their e-mail not using encryption over unencrypted WiFi, so I've heard.

http://www.thinkgeek.com/images/prod...your-email.jpg
10-04-2009, 08:06 PM
N1LAF

Re: Check network traffic to/from your computer

Even better, there is a portable app for Wireshark
10-04-2009, 08:24 PM
KG4CGC

Re: Check network traffic to/from your computer

Very cool. I want to explore it.
10-04-2009, 09:03 PM
n2ize

Re: Check network traffic to/from your computer

Yeah, it's fun to fire up sometimes and watch the traffic bouncing around on my local network, watching stuff being sent out of the local net into the world and watch stuff coming back in. There's a whole lot of stuff going on there. The network is rarely quiet for very long.
10-04-2009, 09:26 PM
W2NAP

Re: Check network traffic to/from your computer

i have it on the BackTrack CD....

and thats all im gonna say about that
10-05-2009, 06:45 PM
ad4mg

Re: Check network traffic to/from your computer

Quote:

Originally Posted by N1LAF

Checkout Wireshark! And it's free. Available for Windows, LINUX, OS X

http://www.wireshark.org/

About Wireshark

Wireshark is the world's foremost network protocol analyzer, and is the de facto (and often de jure) standard across many industries and educational institutions.

Wireshark development thrives thanks to the contributions of networking experts across the globe. It is the continuation of a project that started in 1998.

Features

Wireshark has a rich feature set which includes the following:

* Deep inspection of hundreds of protocols, with more being added all the time
* Live capture and offline analysis
* Standard three-pane packet browser
* Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others
* Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility
* The most powerful display filters in the industry
* Rich VoIP analysis
* Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others
* Capture files compressed with gzip can be decompressed on the fly
* Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)
* Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2
* Coloring rules can be applied to the packet list for quick, intuitive analysis
* Output can be exported to XML, PostScript®, CSV, or plain text

Fascinating program! I installed it on 2 of my Ubuntu boxes, and have been watching the stuff fly by.

Compared to amateur radio packet (I run a JNOS BBS, uses internet protocol), it sure is busy!
10-08-2009, 08:53 PM
kf0rt

Re: Check network traffic to/from your computer

Sweet!

I've been using a different program for this for ages, can't even remember the name.

Did a quick download of wireshark today, and it appears to be solid. Possible even to add proprietary protocol decoders? Ooooh, baby. I'll be looking into this some more.

Thanks, Paul.
10-08-2009, 08:57 PM
W2NAP

Re: Check network traffic to/from your computer

download back track and burn the iso to cd.

its a live cd with a ton of tools i give a 5/5
10-08-2009, 10:13 PM
N1LAF

Re: Check network traffic to/from your computer

Quote:

Originally Posted by kf0rt

Sweet!

I've been using a different program for this for ages, can't even remember the name.

Did a quick download of wireshark today, and it appears to be solid. Possible even to add proprietary protocol decoders? Ooooh, baby. I'll be looking into this some more.

Thanks, Paul.

There is a way to copy hex stream, and I wrote a program to decode that hexstream when pasted into the program.
10-09-2009, 06:58 AM
AF6LJ

Re: Check network traffic to/from your computer

It's a very useful tool, ;)
Found it about 3 years ago when I was looking for a replacment for another packet analyzer I use to use.
10-09-2009, 07:39 AM
KC2UGV

Re: Check network traffic to/from your computer

This is an awesome tool, been using it since it was called Ethereal. And, I like the fact that BackTrack includes it :) Very useful when you sniff traffic for an hour right before a consultancy appointment, find passwords and show them. Makes it easier to explain why you want to bill them $175/hr :)
10-19-2009, 02:45 PM
HUGH

Re: Check network traffic to/from your computer

I use a little freebie called "Cports". It tells me all I need which is which ports are connected to what and enables a quick disconnection if I don't like the look of something.
This may not suffice if you want to see further details down the chain though.
10-19-2009, 02:52 PM
N1LAF

Re: Check network traffic to/from your computer

Quote:

Originally Posted by HUGH

I use a little freebie called "Cports". It tells me all I need which is which ports are connected to what and enables a quick disconnection if I don't like the look of something.
This may not suffice if you want to see further details down the chain though.

Thanks for the information

Downloaded, scanned for virus and spyware (negative), and looks like it does what it says it will do.

http://www.nirsoft.net/utils/cports.html

However, one of their other tools did not pass AVG, flagged as spyware... (sniffpass)
Proceed at your own risk...