[opensuse] replaying a recorded network sniff
Is there a way to replay or reassemble a network stream recorded via a sniffer? Scenario: Using a sniffer to record network traffic from a specific computer on the lan. I need to reconstruct a playable file from the streamed webcam. This is to be used as a hands on test to show that one can gather intel from just sniffing the network. To pursuade some ppl that are VERY set in their way of thinking that the network is secure for anonymous use,..."As long as i dont put my real name out there..." -- /Rikard Johnels -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Rikard Johnels wrote:
Is there a way to replay or reassemble a network stream recorded via a sniffer? Scenario: Using a sniffer to record network traffic from a specific computer on the lan. I need to reconstruct a playable file from the streamed webcam.
This is to be used as a hands on test to show that one can gather intel from just sniffing the network. To pursuade some ppl that are VERY set in their way of thinking that the network is secure for anonymous use,..."As long as i dont put my real name out there..."
Well, there's always Wireshark. However, like all network monitors, it has to be placed where it can actually see the data. With industrial grade switches, there may be a "mirror" port that can be configured to watch other ports. An old 10 Mb/s hub will also work but will slow down the network performance for that user. There are also taps designed for this task. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Wed, 02 Sep 2009 22:56:19 +0200, Rikard Johnels wrote:
Is there a way to replay or reassemble a network stream recorded via a sniffer? Scenario: Using a sniffer to record network traffic from a specific computer on the lan. I need to reconstruct a playable file from the streamed webcam.
This is to be used as a hands on test to show that one can gather intel from just sniffing the network. To pursuade some ppl that are VERY set in their way of thinking that the network is secure for anonymous use,..."As long as i dont put my real name out there..."
Wireshark has some capabilities to do this - check out the "follow stream" capabilities. Jim -- Jim Henderson Please keep on-topic replies on the list so everyone benefits -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hi,
On Wed, Sep 2, 2009 at 11:56 PM, Rikard Johnels
Is there a way to replay or reassemble a network stream recorded via a sniffer? Scenario: Using a sniffer to record network traffic from a specific computer on the lan. I need to reconstruct a playable file from the streamed webcam.
This is to be used as a hands on test to show that one can gather intel from just sniffing the network. To pursuade some ppl that are VERY set in their way of thinking that the network is secure for anonymous use,..."As long as i dont put my real name out there..."
I used Colasoft packet player once: http://colasoft-packet-player.smartcode.com/info.html It is MS Windows only software, but free. It understands different sniffer formats (I tried Wireshark and Omnipeek). -- Mark Goldstein -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (4)
-
James Knott
-
Jim Henderson
-
Mark Goldstein
-
Rikard Johnels