Hello
I've been using wire shark for packet sniffing..
Now I'd like to have new features to be able to sniff packets that are being sent/received by particular application.
Does anyone know of any packet sniffer that allows this?
Printable View
Hello
I've been using wire shark for packet sniffing..
Now I'd like to have new features to be able to sniff packets that are being sent/received by particular application.
Does anyone know of any packet sniffer that allows this?
Ehm, how do you know which application is receiving which packet? If we assume that there is a socket connection, then a socket number is assigned to each packet, but there's nothing saying that for example port 80 isn't sending data to one Opera and Firefox "at the same time".Quote:
Originally Posted by l2u
For Linux, I've used tcpdump, which allows you to filter on IP address and PORT number if you wish. Not sure if there's something similar on Windows.
--
Mats
I'd like to monitor a process/program so that sniffer would be able to filter data that is being recevied/sent by this process.
You can use microsoft's TCPView in combinations with Wireshark perhaps. It takes some manual work though.
Sounds suspicious. Why do you want to do this?
Why do you want to know?
Because I suspect some application so I want to sniff packets it sends.
Do you have a lot of other stuff going on? I am always able to apply Wireshark filtering to get the packages I want. I guess you don't really know what you're looking for and just wants to see everything a certain program sends/recieves over a long period of time, right?
Also, I don't really see why this should be suspicious. Since he asked for a way to monitor a specific program it is clear that he is monitoring a computer where he is the administrator himself. Just monitoring your own computer is perfectly legal and sometimes very useful if you don't trust a program.