Difference between revisions of "Packet sniffer"

From LemonWiki共筆
Jump to navigation Jump to search
Line 23: Line 23:
 
* save as file: ok
 
* save as file: ok
 
* time stamp: ok
 
* time stamp: ok
* license:
+
* license: GNU General Public License version 2<ref>[https://www.wireshark.org/faq.html#_how_much_does_wireshark_cost How much does Wireshark cost?]</ref>
  
  
reference
+
== reference ==
 +
<references />
 +
 
 
* [http://wiki.wireshark.org/DisplayFilters DisplayFilters - The Wireshark Wiki]
 
* [http://wiki.wireshark.org/DisplayFilters DisplayFilters - The Wireshark Wiki]
 
* [http://www.wireshark.org/docs/man-pages/wireshark-filter.html wireshark-filter - The Wireshark Network Analyzer 1.5.0]
 
* [http://www.wireshark.org/docs/man-pages/wireshark-filter.html wireshark-filter - The Wireshark Network Analyzer 1.5.0]

Revision as of 11:59, 22 June 2020

case: try to find mp4 file

keyword filter at URL Snooper v.2.30.01

  • full request URI: ex: http://www.example.com/folder/file.mp4 ok
  • partial URI path: ex: /folder/file.mp4, file.mp4, mp4 ok
  • wildcat: ex: *.mp4 not work Icon exclaim.gif

Filter at Wireshark 1.6.5

  • full request URI: ex: ip.dst == 127.0.0.1 and http.request.uri matches "upload2/letsgo.mp4" (where the domain www.example.com was mapping to IP: 127.0.0.1) ok
  • partial URI path:
    • ex: http.request.uri matches "/folder/file.mp4", http.request.uri matches "file.mp4", http.request.uri matches "mp4" ok
    • ex: tcp and ip.src== 127.0.0.1
  • wildcat: ex: http.request.uri matches "*.mp4" not work Icon exclaim.gif

software list

URL Snooper v.2.30.01

  • live sniffer: ok
  • save as file: n/a
  • time stamp: n/a
  • license: free for perosnal usage

Wireshark 1.6.8

  • live sniffer: ok
  • save as file: ok
  • time stamp: ok
  • license: GNU General Public License version 2[1]


reference

resources