LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   watch all traffic on wlan0 or ethX (https://www.linuxquestions.org/questions/linux-networking-3/watch-all-traffic-on-wlan0-or-ethx-940895/)

newbie0101 04-20-2012 02:18 PM

watch all traffic on wlan0 or ethX
 
hello, i am trying to watch for example http traffic on my wi-fi network of all connected computers.
i'we been using tcpdump an wireshark but those captured only my own traffic.
however when i run command
Code:

ettercap -i wlan0 -TqM ARP:REMOTE // //
then in second console start command
Code:

urlsnarf -i wlan0
can show me traffic of all computers

my question is how can i achieve the same result with tcpdump or wireshark ?
thanks

jefro 04-20-2012 04:30 PM

I get the feeling you have a router or switch just before this computer. A switch is different than a hub. A simple hub would send all data to your computer. A switch prevents useless data from being sent.

In some more advanced devices you can mirror or set some settings to allow all traffic to be sent. Some switches have the ability to monitor traffic to some file also.

joker20 04-21-2012 01:33 AM

to touch on what jefro mentioned its called 'port span' which you can configure on your router or switch to take all traffic the device processes and dump it to a specific port where you connect a client machine and sniff the traffic via tcpdump,wireshark,whatever
if you have a standard soho router this may not be possible unless you use a modded firmware like dd-wrt and even then its questionable if you'll get that function (you normally see this done on commerical networking equipment)

but anyway, im sure theres a way to dump the output of urlsnarf to a file and use wireshark to read it in real time for analyzing...never tried it though
post back if you figure something out!

jefro 04-21-2012 04:42 PM

Thanks, span was the correct term.

http://en.wikipedia.org/wiki/Port_mirroring


All times are GMT -5. The time now is 01:05 AM.