Packet capturing on Windows with netsh
isc.sans.edu
Packet capturing on Windows with netsh
1–10 of 30 posts
Re: Packet capturing on Windows with netsh
#2An even cheaper and simpler option is to run Netstat -a >> c:\netstat.txt and analyze the text file.
Re: Packet capturing on Windows with netsh
#3I think the key insight here is the availability of Message Analyzer app -- I haven't used it but that's a good alternative that's supported than the hoops you sometimes have to join to run Wireshark.
Re: Packet capturing on Windows with netsh
#4[deleted]
Re: Packet capturing on Windows with netsh
#5An even cheaper and simpler option is to run Netstat -a >> c:\netstat.txt and analyze the text file.
It looks like you get far more information from the netsh method than you do with a Netstat, though.
Re: Packet capturing on Windows with netsh
#6An even cheaper and simpler option is to run Netstat -a >> c:\netstat.txt and analyze the text file.
not even close, sorry.
Re: Packet capturing on Windows with netsh
#7An even cheaper and simpler option is to run Netstat -a >> c:\netstat.txt and analyze the text file.
netstat -a only shows (open) connections.
With netsh you can capture the actual traffic and later analyze the content of the communication.
Re: Packet capturing on Windows with netsh
#8Hey it works!, great now I have an alternative to Wireshark.
Re: Packet capturing on Windows with netsh
#9Tried running a capture while downloading a large file in Firefox and the download failed when I started the capture.
Wouldn't recommend running this on a server.
Re: Packet capturing on Windows with netsh
#10very interesting, had no idea the capability was there.
Tried on my own, I see SSID beacons from my wifi card, wifi channel signal levels, then you can go up several layers and see request URI's on HTTP requests.. very nice. More detail, in a parsed format which is filterable than I would have expected..
edit: indeed, it even handles parsing SSH key exchanges.. very impressive: http://imgur.com/ijQX3Zq