# # http://Linux-Sec.net/Sniffer/Howto/sniff.web.txt # # # 13-Jun-10 amo Date-of-Birth Sniffing web pages # # # # Sniffing web pages # tcpdump -nnvvSXXA -s 0 -U -w tcpdump.httpd.pcap src 207.228.3.98 and src port 80 # # # # use wireshark to view the sniffed web packets # wireshark -r tcpdump.httpd.pcap # - click on the line that has (text/html) # # # # # to save the captured webpage to view with a brower later # # -------------------------------------------------------- # # # wireshark->Analyze->FollowTCPStream->SaveAs /tmp/tcpdump.httpd.html # # - firefox file:///tmp/tcpdump.httpd.html # # # # # to manually view the captured images # # ------------------------------------ # # - click on the line GIFxxx line (GIF89a) # # - click on the resulting CompuServe GIF version # # - right click "Export Selected Packet Bytes" # # - save to /tmp/xxx.jpg # # # # # 000000000000000000000000000000000000000000000000000 # For a List of Sniffable and Secure WebMail services # 000000000000000000000000000000000000000000000000000 # http://Linux-Security.net/Mail/WebMail/#SecureWebMail # http://Linux-Security.net/Mail/WebMail/#Sniffable # # # End of file