Debian Packet Sniffing

[Bocaj1994]

I recently installed Debian an old computer to run as a Server and Network manager. I installed WireShark and when I went to run it it couldn't find a Capture Interface, which I assume means Network Card. It is an old computer and it has a LAN connection on the motherboard. When I tried to use it as the Capture Interface it wouldn't show up anywhere. Is it possible for me to do it and is there anyway around it?

 

Also, What are some good reliable Applications to install for Networking?

 

EDIT: Delete, Redirect me or Move as required if I'm an idiot and didn't search properly.

Edited July 10, 2010 by Bocaj1994

[tom_newton]

First up, you will probably need to run wireshark as root - try that and see if it helps. You can only put a card into promiscuous mode as root.

 

I take it other networking is working fine?

 

What sort of other apps were you after?

[Bocaj1994]

Thanks man, that worked. I was just after apps to help manage my network and file sharing.

[tom_newton]

NP.

Nmap is a useful app - and will be in repos, so "apt-get install nmap" - cracking little network scanner. Some commandline fun required though. Remember "tcpdump" is the command line equivalent of wireshark - you can use it where avaialble on remote boxes (eg a SmoothWall, Web Server, Mail server.. whatevers giving you gyp) and copy the file back to your workstation to analyze in wireshark on linux or windows.

 

If you're new to linux, remember traceroute is now called traceroute, not tracert, and lives in /usr/sbin which is sometimes not in path for unpriv'd users

[powdarrmonkey]

On a standard Debian install it's in /usr/bin/traceroute which is a symlink to the alternatives system, so it should work for anybody.