setaOffice

Unix Intelligence Gathering

Running snoop to check the network traffic

Posted by Emerson Takahashi on August 13, 2010

Running snoop to check the network traffic. In this example, I’m generating an output file named /tmp/networkfile, recording everything that’s coming from 192.168.98.98 on port 80/TCP

root@solaris:~ # snoop -o /tmp/networkfile 192.168.98.98 port 80 and tcp
Using device /dev/e1000g0 (promiscuous mode)
147

Listening a specific network interface

root@solaris:~ # snoop -d e1000g0 -o /tmp/networkfile
Using device /dev/e1000g0 (promiscuous mode)
1446

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s

 
Follow

Get every new post delivered to your Inbox.

Join 250 other followers