LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 11-18-2009, 04:24 AM   #1
morningstarcrew
LQ Newbie
 
Registered: Nov 2009
Posts: 3

Rep: Reputation: 0
[ask] how determine subnetmask, gateway, and dns ip from pcap file


Hello everybody,
I want to ask you a newbie question, I have a pcap file. my task is want to know subnetmask, gateway, and dns ip from pcap file.
can you give me a light?

many thanks,

MSC
 
Old 11-18-2009, 04:28 AM   #2
linuxlover.chaitanya
Senior Member
 
Registered: Apr 2008
Location: Nagpur, India
Distribution: Cent OS 5/6, Ubuntu Server 10.04
Posts: 4,629

Rep: Reputation: Disabled
tcpdump tool can open this file. Use it if you want a command line tool else you can look for wireshark.
 
Old 11-19-2009, 04:37 AM   #3
morningstarcrew
LQ Newbie
 
Registered: Nov 2009
Posts: 3

Original Poster
Rep: Reputation: 0
ok. i use wireshark. what packet should i look for? is that tcp,http,or what?

many thanks,

MSC
 
Old 11-19-2009, 04:39 AM   #4
Ippy98
LQ Newbie
 
Registered: Dec 2006
Posts: 13

Rep: Reputation: 0
What exactly do you want to know? I'm not sure I fully understand what you are looking for.
 
Old 11-20-2009, 03:40 AM   #5
morningstarcrew
LQ Newbie
 
Registered: Nov 2009
Posts: 3

Original Poster
Rep: Reputation: 0
What exactly i want to know is how to determine subnetmask, gateway, and dns ip from pcap file.
I've captured many packets from my accesspoint (AP) at my lab without connected to that AP using kismet. No DHCP server was enabled from AP. I used static ip configuration. Act like the person that din't know about AP configuration, i would like to see subnetmask, gateway, and dns ip from pcap file which i got from kismet. I use Wireshark to open&view pcap file. I don't know what packet should i looking for in order to find out subnetmask, gateway, and dns ip. There are many packets if i opened pcap file using wireshark, and i have no clue.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Configuring IP/GATEWAY/SUBNETMASK On 3 LINUX PC's Each With 2 NIC's In A Ring Fashion Gowda2009 Linux - Newbie 1 02-25-2009 10:51 AM
How can I read a .pcap file? abefroman Linux - Software 3 05-29-2008 04:18 PM
How can I generate a pcap file? abefroman Linux - Software 3 05-29-2008 04:18 PM
Dsniff syntax for searching a pcap file? Jukas Linux - Software 5 08-28-2007 01:09 PM
looking for a MSN msgsnarf for pcap file metabaron Linux - Networking 0 07-13-2006 05:29 AM


All times are GMT -5. The time now is 02:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration