CODEWITHSUNDEEP
wiresharkpacket-capture
user499054
user499054

Reputation:

Is there a packet sniffer that can be limited to one single program?

I've been using Wireshark for a while now to analyze a few programs. Is there a way that I can limit Wireshark to sniff only one program? Or is there another program that does something like this?

Upvotes: 0

Views: 2088

Answers (4)

pjf
pjf

Reputation: 21

tracedump is an open source packet sniffer available for Linux, which can do exactly what was asked in the original question; it's free.

Upvotes: 2

user1537909
user1537909

Reputation: 33

Are you looking for Windows or mac...?

If Windows then the answer is yes.You can use Microsoft Network Monitoring tool..

But for mac i did not find any useful tool yet...am still searching...

In mac OS X you can use the following command and that will give you the list of ports used by the application.

    lsof -i |grep firefox|grep Established|awk -F "[ :]*" '{print $10}' |cut -c 1-5 >>/Users/..../Desktop/name.txt

Use these ports to filter the wireshark pcap...

Done...!

Upvotes: 0

Elalfer
Elalfer

Reputation: 5338

Using Wireshark you can filter by destination port number or IP address. For example, Mail clients usually use ports 25 and 110 for sending and receiving emails.

Upvotes: 1

Alexis Dufrenoy
Alexis Dufrenoy

Reputation: 11946

If you are sniffing a web application, you should try to use HttpFox, which is a Firefox plugin. It only show net traffic from the current website.

Upvotes: 0

Related Questions