Wireshark-users: Re: [Wireshark-users] Finding out Stats about users machine
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Tue, 26 Oct 2010 21:20:12 +0200
On 10/26/2010 04:43 PM, Maverick wrote:

Is there anyway in wireshark to figure out from the network traces if
the machine has firewall installed? Aand if it is installed can I
determine if it is being updated ?
Thanks
MAK



Hi,
Well, if you know that certain attack vectors come into that machine, you can see if and how it responds. That behavior is influenced by a firewall, hence could be deduced from it. An update, if done through the captured interface, may be visible when an update site is accessed. 

In short; possible? somewhat, easy? not really.

Thanks,
Jaap