This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I just don't understand all the technical words. Now that I have Wireshark, how can I see a network that I've already had access to. I need to read my brothers e-mail. He passed away and has some documents, etc saved in his inbox.

asked 08 Nov '10, 09:31

heylookhere's gravatar image

heylookhere
1111
accept rate: 0%

edited 08 Nov '10, 10:21

Jaap's gravatar image

Jaap ♦
11.7k16101


Wireshark will not do you any good as the information you are seeking sits on the harddrive. Wireshark can only make things visible that are transferred over the network.

What you are looking for is a (host) forensics tool. I'm sorry but I can't advice you any further as I have never looked into forensics myself...

permanent link

answered 08 Nov '10, 11:08

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

it info in his e mail account rests in his g mail account....not the hard drive. what is a host forensic tool? keylogger??

(08 Nov '10, 11:12) heylookhere

A (host) forensic tool can search through all data on a hard drive to extract data.

However, if the mails are on Gmail, then you would need to find out the password to access that mail. I'm sure Google will cooperate in accessing the mail in your situation if you supply them with the information that they need to confirm the authenticity of your request.

(08 Nov '10, 11:19) SYN-bit ♦♦

and my brother's laughed at me when I gave them my "in case I die, here's the master password for my password-manager/acct list...."

By the way, GMAIL typically is setup to stay logged in. I'm assuming you already tried firing it up to see if it will log you in? Assuming everything is up-n-up, the browser cache/cookie may just let you in.

(08 Nov '10, 11:24) hansangb
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×3
×1

question asked: 08 Nov '10, 09:31

question was seen: 1,545 times

last updated: 08 Nov '10, 11:24

p​o​w​e​r​e​d by O​S​Q​A