This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Capture telnet username and password

0

Hello,

I am trying to get wireshark to capture my telnet session to a cisco switch. I have the capture but can't seem to work out how to display the username and password as it is sent in clear text, where should I be looking?

Thanks

asked 17 Sep '10, 03:17

Gonzouk's gravatar image

Gonzouk
0223
accept rate: 100%


3 Answers:

-1

OMG! that is amazing, thanks very much, shows everything.

answered 17 Sep '10, 05:11

Gonzouk's gravatar image

Gonzouk
0223
accept rate: 100%

2

The idea of the Q&A site is to use the "accept" for the answer that actually does have the answer to the question. That way, people are able to find the answer quickly. You can use the "add new comment" to uhmm... add a comment like you put in your "answer" ;-)

(17 Sep '10, 05:22) SYN-bit ♦♦

3

Telnet sends characters one by one, that's why you don't see the username/password straight away. But with "Follow TCP Stream", wireshark will put all data together and you will be able to see the username/password. Just rightclick on a packet of the telnet session and choose: "Follow TCP Stream".

answered 17 Sep '10, 03:49

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

0

First You have to create a span Port.. i.e a port that get's all the frames passing through the switch.(if you exactly know how the switch work's you'll know what this mean's) and then install the analyzer onto that SPAN port and start sniffing.. you will get the user name and password.. Just follow the TCP Stream you'll get it.. Thanks

answered 29 Mar '12, 12:26

Sibiraj's gravatar image

Sibiraj
1
accept rate: 0%