packet-sniffers

Using RawCap to Sniff localhost on Windows XP, SP3

◇◆丶佛笑我妖孽 提交于 2019-12-23 10:22:50
问题 I am attempting to use RawCap to sniff Windows localhost. However, contrary to its billed ability to do so, it is not working. I am starting it as follows: rawcap 127.0.0.1 echo.pcap I then run a little echo TCP client / server test app I wrote. I use the client to send some data over 127.0.0.1, and it indeed gets printed on the server and sent back to the client, where it is also printed. Howver, the packet capture file is empty. I am running under Windows XP, SP3. Is anybody aware of any

How to filter by ethernet MAC address

半城伤御伤魂 提交于 2019-12-22 06:42:31
问题 The following code: sniff(filter = "dst aa:bb:cc:dd:ee" ) throws an error because sniff is expecting an IP, not a MAC. So how are you supposed to filter by MAC? 回答1: what about specyfing a lfilter for sniff ? zzz = sniff(lfilter=lambda d: d.src == 'aa:bb:cc:dd:ee:ff') dst and src are attributes of sniffed message. previously i have posted an answer where stop_filter was specified. i suppose that it wouldn't work for you, since scapy would stop after receving first packet that match the mac

HTTPS sniffing/Charles SSL doesn't work on Facebook

℡╲_俬逩灬. 提交于 2019-12-21 22:37:41
问题 Charles SSL works on basically any other app or website except Facebook. I have installed all the certificates on iOS devices, but when sniffing Facebook only, I always get status Failed when method is CONNECT . What is wrong? 回答1: Probably using certificate pinning. Find some info in the comments to the answers here: How Facebook, SnapChat, or Gmail iOS apps prevent Fiddler decrypting their https traffic? Blog that explains it well Certificate Pinning is an extra layer of security that is

Simple Raw Packet Sniffer In Python

别等时光非礼了梦想. 提交于 2019-12-21 05:41:50
问题 First, I'm a beginner in python. I developed a simple raw packet sniffer utilizing the PF_PACKET interface that operates at layer 2. The sniffer simply figures out the following... - Ethernet Header (Source - Destination - Protocol) - IP Header (Source IP - Destination IP) - TCP Header(Source Port - Destination Port) Here's the code I've written so far... #!/usr/bin/env python import struct import socket import binascii rawSocket=socket.socket(socket.PF_PACKET,socket.SOCK_RAW,socket.htons

Any good .net packet sniffers around? [closed]

风流意气都作罢 提交于 2019-12-20 03:08:23
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 6 years ago . I am looking for one to use from my c# application. Anyone knows a free one? 回答1: Take a look at SharpPcap, which is a .NET-Wrapper for WinPcap. 回答2: A Network Sniffer in C# Packet Sniffer in C# 来源: https://stackoverflow.com/questions/1271001/any-good-net-packet-sniffers-around

Firefox's geo.wifi.url's https://www.google.com/loc/json not used?

谁说我不能喝 提交于 2019-12-19 10:19:59
问题 I used a network sniffer and examined all the requests going out from Firefox when going to http://html5demos.com/geo. According to my Firefox, the geolocation service according to geo.wifi.uri entry is https://www.google.com/loc/json. However I don't see this url in any of the requests. What am I missing? 回答1: I see it in LiveHTTPHeaders: https://www.google.com/loc/json POST /loc/json HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:2.0b12pre) Gecko/20110220 Firefox

Firefox's geo.wifi.url's https://www.google.com/loc/json not used?

核能气质少年 提交于 2019-12-19 10:19:41
问题 I used a network sniffer and examined all the requests going out from Firefox when going to http://html5demos.com/geo. According to my Firefox, the geolocation service according to geo.wifi.uri entry is https://www.google.com/loc/json. However I don't see this url in any of the requests. What am I missing? 回答1: I see it in LiveHTTPHeaders: https://www.google.com/loc/json POST /loc/json HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:2.0b12pre) Gecko/20110220 Firefox

Is there an API for Wireshark, to develop programs/plugins that interact with it/enhance it? [closed]

旧时模样 提交于 2019-12-17 23:35:09
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed last year . Googling didn't give me great results. Is there any sort of API for Wireshark that abstracts away from the main source code so we can develop programs that interact with it and deal with the data it provides? edit: I appreciate the suggestions for different ways to receive packets, but I want to implement packet

Bluetooth sniffer - preferably mac osx

牧云@^-^@ 提交于 2019-12-17 21:44:26
问题 I am trying to find a bluetooth packet sniffer to capture bluetooth signals from close by devices. I would like for this application to work on mac osx. I have had difficulty finding anything at all so my requirements are low right now - something that shows signal strength and mac address would be a good start. 回答1: Actually, Xcode does not include the bluetooth utilities by default. You need to open Xcode, go to Xcode>Open Developer Tool>More developer tools, then login with your Apple

Strange RAW Socket on Mac OS X

一个人想着一个人 提交于 2019-12-17 18:43:40
问题 When i run a simple packet sniffer coded in C on my Mac OS X, i got no output at all, this is a strange thing! can someone help me to understand what going on. #include <stdio.h> #include <stdlib.h> #include <string.h> #include <sys/socket.h> #include <netinet/in.h> #include <arpa/inet.h> int main(void) { int i, recv_length, sockfd; u_char buffer[9000]; if ((sockfd = socket(PF_INET, SOCK_RAW, IPPROTO_TCP)) == -1) { printf("Socket failed!!\n"); return -1; } for(i=0; i < 3; i++) { recv_length =