Sniffing PPP/WAN interface in Vista/Server 2008 - windows-vista

I used to be able sniff traffic on windows xp and server 2003 on PPP/WAN interfaces using wireshark. There used to be a Generic dialup interface, but its seems not to be there on vista/server 2008/7/Server 2008 R2. I did some google but it didnt come up with any results. Have you guys any idea to get it started?

From what I have gathered, wireshark cannot sniff packets across a dialup (PPP/WAN) interface. In short there is nothing that you can do, I've tried to get it to work but it's only for ethernet/wireless interfaces only.
Hope this helps,
Best regards,
Tom.

Related

How to workaround the "Limitations on Raw Sockets" under Windows 7?

I am developing a TCP protocol fuzzing software under Windows 7. I wanna to send self constructed TCP packet using Raw Sockets. But it seems that Microsoft forbid this for some security reasons. (http://msdn.microsoft.com/en-us/library/windows/desktop/ms740548(v=vs.85).aspx)
I know WinPcap can also send custom packets. But I don't want to build a packet from the Ethernet level. The parameters for Ethernet and IPv4 are so complex and drive me crazy. I only cares about the TCP above parts. Are there any solutions to workaround this? All I can think out is to change my Win7 to Windows 2008 R2, but it's a big project to do. I hope there are better ways?
After Windows XP Service Pack 1, the ability to send raw sockets has been disabled, however you can still read them.
You can modify the source code example provided by Microsoft in the WDK to enable raw sends again. For more information, check the link.
PCAUSA - How To Access To NIC Drivers From A Win32 Application
Alternatively, you may use WinPcap to inject packets into the network.
WinPcap

Windows 7 wireless service not working as expected

I have this one issue, which I'm hopeful you guys will help me out with...
I use a plugin we have created for IE... It detects devices over the network... Devices are the ones that we ourselves have created... Now this plugin works fine and detects devices when it is wired with the Ethernet on our Subnet in XP as well as Windows 7... It detects devices when it is connected Wirelessly over our Subnet in Windows XP... But when I connect it with my Wireless subnet over Windows 7 it stops discovering the devices... The moment I enable my LAN it again detects the devices... It's behaves very stange on this part and I can't be sure that Windows 7 is responsible for this but it had to be considered... There seems like a wireless security affecting it but there is no such proof as off now...
I'm not fully aware of the plugin code but it uses mDNSresponder service over the network...
I use Windows 7 64-bit OS and Internet Explorer 9... The tests have been made over Windows 7 32-bit and IE version 8 and 9, to give the same outcome... Windows firewall has been turned on/off as well...
I'm sorry if I've posted over a wrong thread, please forgive me for any inconsistencies... Any help is appreciated... Thanks...
EDIT-1: The plugin has been built with C++ and I could give you the code for it as well but the point is that it does not get involved here... It seems like an issue over Wireless in Windows 7... I used Wireshark to sniff the packets over the network and found out that there while running in a wired network I can see requests and responses over the MDNS protocol... But when I switch to Wireless network there is no request or response over MDNS and hence there is no query sent only over the network... Seems like when I connect with the Wireless network, something blocks the plugin from querying the network... Help me out with this if possible... Thanks so much...
Ok the issue is solved... The problem was that my program was not being able to find the IEEE 802.11 wireless network interface... Since the dawn of Vista, Windows has changed some it its architecture and my program was made years before that...
Before Vista, the network adapter type value for Ethernet and IEEE wireless was same i.e 6 and is known as MIB_IF_TYPE_ETHERNET... But now they both have been differentiated and IEEE wireless adapter gets a new value 71 named IF_TYPE_IEEE80211... In our code we had a validation to reject network adapters other than MIB_IF_TYPE_ETHERNET and so it used to work with XP, but Windows 7 had other plans... Adding another validation for IF_TYPE_IEEE80211 solved the problem.
You can check out the below link to get more clarity over this and let me know if you've any queries...
http://msdn.microsoft.com/en-us/library/windows/desktop/aa366062%28v=vs.85%29.aspx
Cheers...

WP7 Debugging without Tethering over USB?

i want to Debug some Networkproblem cases in my Application. But i can't really test it because my Phone has internet over USB. If I disconnect it from USB i can't debug... So is there anyway, I can disable the Tethering over USB on my Phone?
Edit: I have a HTC Trophy but it's the same with the Lumia 800 of my friend...
Assuming that you're connecting to a web service which isn't running on your machine, you can test this by disconnecting your PC from any network which gives it access to the internet (i.e. turn off wifi on the pc or pull the network cable.)
It's not an elegant solution or one that can be easily automated but it works. ;) (I used this method with testing an app which would progressively download large files in pieces and would stop and then resume as connectivity was lost and restored.)
You also can use Fiddler http://www.fiddler2.com/fiddler2/ as a Proxy for your emulator to simulate lossy connections or no connection at all. This way you can still surf and look for references while you code :-)
edit: fiddler doesnt seem to work for the Emulator(for more information, look into the comments), but if you want to simulate a lossy Connection then this is the way to go, even work for phones with the connection-cable.

Setting IGMP Version on Windows 7

I have a piece of software written "out there" (e.g. no source code available) that allows me to use it in multicast mode. I'm trying to use this software on a network that, for technical reasons, can only use IGMP Version 2.
My OS is Windows 7 (64-bit, though I doubt that makes a difference). So far my searches have only given me Windows XP & Windows Server solutions, all of which involve editing the registry. In addition to the usual reasons (aka "registry paranoia"), I hesitate to edit the registry in this case because this particular network is not the only one that I will be using; I have not problems at all in all the other networks I try using multicast on.
Is there a straightforward way to force this software onto IGMP V2?
Thanks!
John Price
As far as I remember, adding IGMPVersion=3 to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters is the only way to solve your problem.
Anyway, there is another creepy solution - just write a little daemon, that will sniff for IGMPv3, parse data from it and send IGMPv2 packets =)

Debugging Windows Phone 7 device traffic with Fiddler

I followed all the steps from the article but when I try to hit the server from my windows phone it says there is a dns error.
Article for reference.
http://blogs.msdn.com/b/fiddler/archive/2011/01/09/debugging-windows-phone-7-device-traffic-with-fiddler.aspx
How do I know my windows phone is using my local LAN WIFI as opposed to ATT cellular?
Personally, I use Netmon 2.3 for network traffic information from WP7. Fiddler didn't support WP7 up until recently and Netmon/Wireshark did, so I just stick with those.
Using Netmon 2.3, while your device is connected to Zune/WPConnect, you'd be able to see all WP7 device transport on the ZuneComm process. Netmon isn't as user-friendly as Fiddler, but it's fairly darn specific and easy.
You could turn on flight mode and then turn wifi back on.
Or you could take the sim out.
Either of those ways will ensure you're not using the cellular network.
I used the IP address instead of dns and it worked.

Resources