This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Determine username & password used to log in using wireshark?

0

can you figure out the username and password looking at captured packet below. download file telnet-cooked.pcap (9kb) from http://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=view&target=telnet-cooked.pcap and open it with wireshark and determine the username and password that was used to log in. also state which packet no. thank you

asked 04 Feb '11, 15:09

momoboyus's gravatar image

momoboyus
1113
accept rate: 0%

edited 04 Feb '11, 16:34

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245


One Answer:

2

Username is fake -- frame 31

Password is user -- frame 38

It is easiest just to right click an "follow tcp stream".

answered 04 Feb '11, 16:26

Paul%20Stewart's gravatar image

Paul Stewart
3018
accept rate: 6%