Wireshark · Wireshark-users: Re: [Wireshark-users] Determining which ports a device is making requets on

[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

Hi,

I think Wireshark can help you here. Start a capture on the network
interface the multimedia device is connected to, and trigger it into
communicating with the server. You can apply a display filter to focus on
their communication, by means of ip address of the multimedia device
(ip.addr == <IP address multimedia device>), or on TCP port number
(tcp.port == <port number>) or UDP port number (udp.port == <port number>),
whatever protocol is applicable, of the server process.

Thanks,
Jaap

On Tue, 8 Jun 2010 14:08:48 +0300, Dotan Cohen <dotancohen@xxxxxxxxx>
wrote:
> On a user's home network is a small multimedia device, which
> interfaces with some proprietary software running on a Linux server. I
> can see which ports the Linux server is listening on, with nmap, but I
> would love to know which ports the device is actually making requests
> on. I have root access to the Linux machine. Would wireshark be the
> right tool for determining this, or is something better suited?
> Thanks.