System information

Manual:Tools/Packet Sniffer

Packet Sniffer Host

Sub-menu: /tool sniffer host

The submenu shows the list of hosts that were participating in data excange you've sniffed.

[admin@SXT test] /tool sniffer host> print

# ADDRESS RATE PEEK-RATE TOTAL

0 10.5.101.3 0bps/0bps 0bps/720bps 0/90

1 10.5.101.10 0bps/0bps 175.0kbps/19.7kbps 61231/7011

2 10.5.101.13 0bps/0bps 0bps/608bps 0/76

3 10.5.101.14 0bps/0bps 0bps/976bps 0/212

4 10.5.101.15 0bps/0bps 19.7kbps/175.0kbps 7011/61231

5 224.0.0.2 0bps/0bps 608bps/0bps 76/0

6 224.0.0.5 0bps/0bps 1440bps/0bps 302/0

[admin@SXT test] /tool sniffer host>

Property Description

address (read-only: IP address) IP address of the host

peek-rate (read-only: integer/integer) The maximum data-rate received/transmitted

rate (read-only: integer/integer) Current data-rate received/transmitted

total (read-only: integer/integer) Total packets received/transmitted

Packet Sniffer Connections

Sub-menu: /tool sniffer connection

Here you can get a list of the connections that have been watched during the sniffing time.

[admin@MikroTik] tool sniffer connection> print

Flags: A - active

# SRC-ADDRESS DST-ADDRESS BYTES RESENDS MSS

0 A 10.0.0.241:1839 10.0.0.181:23 (telnet) 6/42 60/0 0/0

1 A 10.0.0.144:2265 10.0.0.181:22 (ssh) 504/252 504/0 0/0

[admin@MikroTik] tool sniffer connection>

Property Description

active (read-only: yes | no) Indicates whether connection is active or not

bytes (read-only: integer/integer) Bytes in the current connection

dst-address (read-only: IP address:port) Destination address

mss (read-only: integer/integer) Maximum segment size

resends (read-only: integer/integer) The number of packets resends in the current connection

src-address (read-only: IP address:port) Source address