This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hey!

I have two laptops set up on my network, and I have been using Wireshark to pick up the packets from one on the other. I'm wondering, is there any way to "mirror" the activity of the laptop being sniffed on the sniffing laptop? Like, I get one packet from laptop A and laptop B says "Oh, I am going to pretend this packet is for me!". In theory, wouldn't this allow laptop B to see pretty much what laptop A is seeing (minus dropped packets, inability to ACK, etc?) Even a somewhat decent emulation in a browser would be so much easier to sift through than looking through the packets manually. Thoughts?

asked 30 Aug '13, 18:57

orisqu's gravatar image

orisqu
11224
accept rate: 0%


In theory, wouldn't this allow laptop B to see pretty much what laptop A is seeing

Yes, and in practice, that's what webspy (part of dsniff) was designed for.

http://linux.die.net/man/8/webspy

However, that project/tool is abandoned now, and I have not tried webspy lately.

xplico has similar features.

http://www.xplico.org/

Regards
Kurt

permanent link

answered 31 Aug '13, 14:21

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×248
×24
×5
×2

question asked: 30 Aug '13, 18:57

question was seen: 1,455 times

last updated: 31 Aug '13, 14:21

p​o​w​e​r​e​d by O​S​Q​A