sniffer and tcp 1

[Amphrodite1]

is it possible to find out the tcp ports using a sniffer
if so how? pls help

 

[rwullems]

A little bit more info about what you are looking for would help.
But there are several ways to figure out what portnumbers are used on the network when you are using a Sniffer. Simpelest one is to look at the connection / session layer in the expert. Another possibility is to take a look at the decode tab were you can find the port numbers in the TCP (or UDP too) header of each frame. Also if these portnumbers represent well know applications, you can see in the matrix view wich application (this does not give you the portnumber, only the app. name)
Robert

Robert A.H. Wullems
Sniffer University Instructor
SCM / CNX / MCP
Citee Education
the Netherlands

 

[fortunat]

If you want to know what port number a specific application uses try netpeeker. Its free and does a good job

http://www.net-peeker.com/Download.htm

Regards

'Making things work better; bit by bit.'

 

[AlfSutherland]

Hi,
Following on from Robert's post, once you've discoverd the port numbers in operation, you can then add them into the Sniffer system so they will be shown (as opposed to "others&quot. This can be done by going to "Tools, Options, Protocols" and manually adding in a name and the port no. After a re-boot, in both the monitoring and expert screens the specific port no.s will be displayed.


Also there a numerous web sites detailing all the registered port numbers that applications use;

http://www.iana.org/assignments/port-numbers

http://helios.mm.di.uoa.gr/~rouvas/port-numbers.html

Alf