Stack Overflow
Stack Overflow

Questions tagged [wireshark]

Wireshark is a network capture and protocol analyzer tool. If this question isn't directly about programming, consider asking it on Super User or Network Engineering instead of here.

Wireshark is a network capture and protocol analyzer tool. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto standard across many industries and educational institutions. For capturing it relies on the libpcap library.

3029 questions
302
votes
15 answers

Capturing mobile phone traffic on Wireshark

How can I capture mobile phone traffic on Wireshark?
Xara
  • 8,748
  • 16
  • 52
  • 82
296
votes
8 answers

How to filter by IP address in Wireshark?

I tried dst==192.168.1.101 but only get : Neither "dst" nor "192.168.1.101" are field or protocol names. The following display filter isn't a valid display filter: dst==192.168.1.101
Alan
  • 5,029
  • 5
  • 32
  • 37
152
votes
12 answers

Filter by process/PID in Wireshark

Is there a way to filter or follow a TCP/SSL stream based on a particular process ID using Wireshark?
Ryan Fernandes
  • 8,238
  • 7
  • 36
  • 53
146
votes
9 answers

Wireshark localhost traffic capture

I wrote a simple server app in C which runs on localhost. How to capture localhost traffic using Wireshark?
Udara S.S Liyanage
  • 6,189
  • 9
  • 33
  • 34
109
votes
5 answers

Install Wireshark on MacOS X via brew

I installed Wireshark on my mac with the command brew install wireshark but after that, a message told me that I had to curl and install ChmodBPF, so I did that too. But there is no command named Wireshark on terminal. What is wrong with that?
Aryan
  • 2,675
  • 5
  • 24
  • 33
103
votes
7 answers

Wireshark vs Firebug vs Fiddler - pros and cons?

Recently, I came across an issue where a CGI application is not responding. Symptom is Firefox displaying: Transferring data from localhost... But the thing is I cannot see any traffic from Firebug's Net panel, and the browser just stays on the…
Michael Mao
  • 9,878
  • 23
  • 75
  • 91
76
votes
9 answers

Sniffing an Android app to find API URL

I'm curious as to how I could figure out the API URL an Android application (any app I have installed) uses if it makes API calls to some online server (a RESTful service for example). I presume I have to capture packets on the device and maybe…
derpyderp
  • 926
  • 1
  • 10
  • 15
66
votes
11 answers

Monitor network activity in Android Phones

I would like to monitor network traffic of my Android Phone. I was thinking using tcpdump for Android, but I'm not sure if I have to cross-compile for the phone. Another question is the following, If I want to monitor the trafic data for a certain…
Iker
  • 2,018
  • 2
  • 29
  • 52
65
votes
13 answers

How do you monitor network traffic on the iPhone?

We are looking for a Wireshark-like tool to use on the iPhone to test a 3rd party application before partnering with the 3rd party. Any suggestions?
Jason Reynolds
62
votes
2 answers

Sniff HTTP packets for GET and POST requests from an application

I am coding an SEO tool in C# for doing keyword research. I need to make calls to Google Adword keyword tool. Now I know some tools which are doing the same already. I just need to decipher what they are doing. I tried using Wireshark but it's very…
Sumit Ghosh
  • 3,264
  • 4
  • 40
  • 59
58
votes
11 answers

Wireshark - you don't have permission to capture on that device mac

I installed Wireshark and during the installation it showed an error but the installation itself completed. When I ran the program and tried to capture packets on my network, it showed this error: I'm new to mac so i don't even know how to properly…
martinhajny
  • 585
  • 1
  • 5
  • 6
57
votes
5 answers

How do I clear the capture window in Wireshark?

Is there a way to clear the capture window in Wireshark without restarting the capture or re-applying the filter? It's difficult to tell one set of traffic from another without looking very closely at the timestamp.
Ryan Shripat
  • 5,574
  • 6
  • 49
  • 77
54
votes
1 answer

Saving the displayed/filtered packets in wireshark

I applied a filter in wireshark to display only the incoming packets to my PC. When I save the filtered/displayed packets to a .csv file, I actually saves all the packets (un-filtered). How can I save only the displayed/filtered packets?
user846400
  • 1,061
  • 1
  • 17
  • 25
51
votes
5 answers

How to test which version of TLS my .NET client is using?

I support a .NET site which (amongst many, MANY, other things) talks to remote APIs from supplier systems. We want to upgrade to support TLS 1.2 We're hoping to do so as per this question: Are there .NET implementation of TLS 1.2? But how do I check…
Brondahl
  • 7,402
  • 5
  • 45
  • 74
45
votes
3 answers

How can I add a custom protocol analyzer to wireshark?

I have a custom protocol that I'm looking at in wireshark. I thought it'd be useful if wireshark could disect it for me so that I don't have to decode the hex. Although I'm doing this in my program logs, wireshark captures the whole conversation…
hookenz
  • 36,432
  • 45
  • 177
  • 286
1
2 3
…
99 100