Data Capturing

Hi Experts,
I would be able to capture data as chatting messages and passwords come through my TP-Link router.

Appreciate for any help
lexmark1Asked:
Who is Participating?
 
KimputerConnect With a Mentor Commented:
Also, you're probably missing the hardware requirements to capture the actual packets (unless you got a hold of a fancy custom firmware). You need an old hub or managed switch with port mirroring on any end where ALL data packets come together, and connect your laptop with Wireshark before you can even start decoding the packets.

Situation 1:
It's a modem router, there's no WAN port (but directly to the phone line/ADSL). You can't capture Wifi! You need an extra switch besides the old hub or managed switch that I mentioned before. Connect all LAN cables to this switch, then a cable to the old hub or managed switch. Then a cable to the TPLink. Your laptop will be connected to the hub/managed switch
Situation 2:
It's a "normal" router with wifi. Connect WAN from TPLink to your hub/mananged switch, from there connect to the original location (probably modem). Connect laptop to hub/managed switch.
0
 
Zephyr ICTConnect With a Mentor Cloud ArchitectCommented:
Wireshark is the go-to tool for capturing packets, either on LAN or WAN, it won't give you the passwords or chat messages in a clear to see way but you can use filters to optimize it, more info to use Wireshark on WiFi: http://wiki.wireshark.org/CaptureSetup/WLAN

There's also loads of videos and howto's out there on using Wireshark to capture traffic.

Let me know if you need more info.
0
 
Mohammed KhawajaConnect With a Mentor Manager - Infrastructure:  Information TechnologyCommented:
Most sites that require authentication utilizes SSL and same for chats.  You will not be able to see them in plain-text as they will be encrypted.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
Giovanni HewardCommented:
If your IM client requires SSL/TLS, try using an SSL MiTM proxy, such as Burp Suite, Fiddler, or Charles.  Succeeding may depend on whether or not the IM client will inherently trust untrusted certs, or is configurable to do so.

Depending on the IM client, different approaches may be required-- for example Lync.
0
 
lexmark1Author Commented:
Thanks for all participators,
In deed I used a Cisco switch and connect my laptop to the mirror port also I used Wfilter software to track users I can see websites and web mail but not whatsapp and viber chatting also I am unable to see passwords.

Thanks
0
 
KimputerCommented:
Ok good to know. But those are indeed secured traffic. I'm not even sure is it's basic SSL/TSL, or if there's an extra own encryption layer above it (like Skype used to have). As stated above, if you try any man in the middle attack, you risk breaking the client (and if not, probably a big warning sign which might frighten the user into continuing his session).
And if an extra encryption layer is used, you might need months if not years to crack it.
0
 
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
My question is what are you trying to achieve?
0
 
lexmark1Author Commented:
I want to be able to capture any chatting messages and any password in plain text.

Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.