Hello, I am trying to get wireshark to capture my telnet session to a cisco switch. I have the capture but can't seem to work out how to display the username and password as it is sent in clear text, where should I be looking? Thanks asked 17 Sep '10, 03:17  Gonzouk |
3 Answers:
OMG! that is amazing, thanks very much, shows everything. answered 17 Sep '10, 05:11 Gonzouk |
Telnet sends characters one by one, that's why you don't see the username/password straight away. But with "Follow TCP Stream", wireshark will put all data together and you will be able to see the username/password. Just rightclick on a packet of the telnet session and choose: "Follow TCP Stream". answered 17 Sep '10, 03:49  SYN-bit ♦♦ |
First You have to create a span Port.. i.e a port that get's all the frames passing through the switch.(if you exactly know how the switch work's you'll know what this mean's) and then install the analyzer onto that SPAN port and start sniffing.. you will get the user name and password.. Just follow the TCP Stream you'll get it.. Thanks answered 29 Mar '12, 12:26  Sibiraj |
The idea of the Q&A site is to use the "accept" for the answer that actually does have the answer to the question. That way, people are able to find the answer quickly. You can use the "add new comment" to uhmm... add a comment like you put in your "answer" ;-)