#packet-analyzer

Fixed: Change protocol associated with port in wireshark #computers #solution #it

Change protocol associated with port in wireshark

I’m trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 – ie as HTTP.

Just using Decode_As on the menu seems to allow half the conversation but only one side.

Any suggestions how to make this a permanent option?

Answer [by James F]: Change…

Fixed: Monitor number of bytes transferred to/from IP address on port #development #it #answer

Monitor number of bytes transferred to/from IP address on port

Can anyone recommend a linux command line tool to monitor the number of bytes transferred between the local server and a specified IP address/port.

The equivalent tcpdump command would be:

tcpdump -s 0 -i any -w mycapture.trc port 80 host google.com

which outputs :

46 packets captured 131 packets received by filter 0 packets dropped…

Answer: Change protocol associated with port in wireshark #fix #answer #development

Change protocol associated with port in wireshark

I’m trying to monitor some web traffic using wireshark. Our web proxy is on port 9191. How can I get the wireshark view to treat port 9191 just like port 80 – ie as HTTP.

Just using Decode_As on the menu seems to allow half the conversation but only one side.

Any suggestions how to make this a permanent option?

Answer [by James F]: Change…

Resolved: Debugger for Iptables #answer #dev #fix

Debugger for Iptables

I’m looking for an easy way to follow a packet through the iptables rules. This is not so much about logging, because I don’t want to log all traffic (and I only want to have LOG targets for very few rules).

Something like Wireshark for Iptables. Or maybe even something similar to a debugger for a programming language.

Thanks Chris

Note:It doesn’t have to be a fancy GUI…

Answer: Is there an easy command line tool for packet sniffing a single command on linux? #programming #development #it

Is there an easy command line tool for packet sniffing a single command on linux?

I’d love if there was a single command line tool for packet sniffing a single command in Linux. something like sniff dumpfile command so that you could just run the command you want to packet sniff in the terminal and get a dump of the packets somewhere else.

I’d like to dump / save / see only the network traffic…

How to: How can I search the info column in WireShark? #dev #answer #it

How can I search the info column in WireShark?

WireShark | Windows

I want to search a packet capture of SMTP traffic for specific addresses/messages. Normally, I just sort the info column and browse but it would be nice if I could just run a search or filter for the specific string I’m looking for.

Is there a way to do this in WireShark?

Answer [by Gerald Combs]: How can I search the info column…

Answer: Debugger for Iptables #solution #development #answer

Debugger for Iptables

I’m looking for an easy way to follow a packet through the iptables rules. This is not so much about logging, because I don’t want to log all traffic (and I only want to have LOG targets for very few rules).

Something like Wireshark for Iptables. Or maybe even something similar to a debugger for a programming language.

Thanks Chris

Note:It doesn’t have to be a fancy GUI…

Resolved: Is there an easy command line tool for packet sniffing a single command on linux? #solution #programming #dev

Is there an easy command line tool for packet sniffing a single command on linux?

I’d love if there was a single command line tool for packet sniffing a single command in Linux. something like sniff dumpfile command so that you could just run the command you want to packet sniff in the terminal and get a dump of the packets somewhere else.

I’d like to dump / save / see only the network traffic…