Ask Ubuntu
Ask Ubuntu

Questions tagged [packet-analyzer]

A packet analyzer is software or hardware that can capture and log traffic passing through a network.

25 questions
15
votes
1 answer

How to install driver for TP-Link TL-WN722N on Ubuntu 14.04?

Hi I am new to Ubuntu and Linux. As I am developing a WiFi product, I want to capture the WiFi traffic wirelessly with Wireshark. Having some searching in the web, I know that I can do that with a USB WiFi adapter and Ubuntu. Then I can run the…
eepty
  • 535
6
votes
3 answers

Can't install libdouble-conversion1 on Ubuntu-19.10

When I tried to install Cisco packet tracer from deb file it gave the following error: Unpacking packettracer (7.3.0) ... dpkg: dependency problems prevent configuration of packettracer: packettracer depends on libdouble-conversion1; however: …
Utshaw
  • 555
5
votes
2 answers

How to ping a specific port

I often use the ping command to check if a website is available or not, or if I can access a machine, so basically mostly for diagnostics, and what would be really useful is if I could specify which port(s) those ICMP echoes go to, is there any way…
user364819
2
votes
2 answers

How to enable IPV6 packet capturing in WireShark at the same time as IPV4?

I am running Ubuntu 15.10 with GNOME 3.18, and for some debugging work need to capture IPV6 packets going to and from a specific port, however I understand that by default IPV6 packets are not captured by WireShark, so how can I get WireShark to…
user364819
2
votes
0 answers

Why does wireless packet capture without monitor mode provide Ethernet headers?

Yes, I do know to capture wireless traffic you really need to enable monitor mode, so please don't steer the discussion that way. I am asking about the unusual behavior (at least to me) that has been observed when you do capture without monitor mode…
YLearn
  • 121
2
votes
2 answers

How can I use complex filters by protocol in tcpdump?

I can filter by lots of protocols in wireshark and tshark, like this: sudo tshark -i -Y '(ip.addr == and isakmp)' How can I add the protocol filter in a tcpdump command like this? sudo tcpdump -i any -nn host
Maf
  • 134
1
vote
0 answers

Webserver not responding to SYN packets on 1 interface

I have a dual-homed Intranet server that serves 2 different sub-nets. After working just fine, during some re-configuring of some external elements of one of the sub-nets, the accessibility from that sub-net was lost. Of course I thought it was the…
RMac
  • 11
  • 2
1
vote
1 answer

How to perform detail packet capture on Ubuntu firewall?

I've routed internet traffic of my other systems on this ubuntu linux system where I have configured packet forwarding. but still I am unable to get internet on other systems. Hence I want to perform packet capture to see if routing is happening…
Hrish
  • 2,399
1
vote
1 answer

Any command to check packets received and transmitted

Is there any command line option to check how many packets my P.C is receiving and transmitting in real time (something like top) ?
Jay
  • 2,370
1
vote
1 answer

Finding Downloaded Files In .pcap File

I am looking through a packet capture (.pcap) file, trying to find 4 files downloaded from an FTP server, but haven’t been able to find them. I have tried many online tools, but am unable to use Wireshark, tcpick, and tcpxtract. Any help would be…
DJCZ
  • 11
  • 1
  • 3
1
vote
2 answers

How to analyze packets from tshark in realtime via bash?

I need to analyze the IPSec packages from this command in real time: sudo tshark -i -Y '(ip.addr == )' I need to check whether an isakmp package is sent to set a variable as true. I can't wait until the whole sniffing process…
Maf
  • 134
1
vote
0 answers

Why are my laptop sending requests to microsoft ncsi ca every 15 seconds from different ports?

so I was doing some packet sniffing using wireshark when I noticed that my laptop are consistently sending requests to www.msftncsi.com, I have no idea why this is happening all of a sudden, this is new behaviour. I've tried tracking down the…
Billy
  • 53
  • 1
  • 4
0
votes
2 answers

What does "Compression Method : null(0)" mean in Client Hello?

As a task of my assignment, I used wireshark to capture packets. Now in Client Hello message, I saw compression method:null(0). Now I am confused what is that mean? Does that mean no compression is required? Or null(0) is itself a compression…
Nahid Hossain Shihab
  • 101
0
votes
1 answer

GNURadio Companion and gr-ax.25 or gr-packetradio

As you've seen many times before "I'm new to Linux". Add me to the list of newbs. So. I need to send a variety of APRS (Automatic Packet Reporting System) packets from an emulated transmitter. I'm using GNURadio Companion and a HackRF One. I can't…
Angry Static
  • 1
0
votes
1 answer

How to Extract parameters from captured beacon frame

So I was able to extract the SSID and Mac Address from the captured Beacon Frame stored in pkt. I used scapy library's sniff function to capture the beacon frame. I did this to capture the mentioned parameters as: pkt.addr2 #for Mac…
Anshul Goel
  • 1
  • 1
1
2