Capture Traffic on my Linksys WRT54G

With the default operating system on your Linksys its difficult if not impossible but hope still exists. Check out www.dd-wrt.com | Unleash Your Router

Step by Step instructions on installing dd-wrt found on there wiki here

Not sure how much space you have on your router, or if you have jffs enabled, etc.. but here is a tutorial on installing packages on your dd-wrt installation

Ipkg (tutorial) - DD-WRT Wiki

just install the tcpdump package which can be found here

Index of /whiterussian/packages/

you will need the libpcap package well..

Here got it running in like 2 minutes -- Just installed to smb mount, etc.

DD-WRT v24 std ? 2007 NewMedia-NET GmbH
Release: 10/10/07 (SVN revision: 8151)
Authenticating with public key "rsa-key-20050817"
==========================================================

____ ___ __ ______ _____ ____ _ _
| _ | _    / / _ _ _| __ _|___ | || |
|| | || ||____  / / /| |_) || |   / / __) | || |_
||_| ||_||_____ V V / | _ < | |  V / / __/|__ _|
|___/|___/ _/_/ |_| _|_| _/ |_____| |_|

DD-WRT v24
http://www.dd-wrt.com

==========================================================
BusyBox v1.4.2 (2007-10-10 01:13:37 CEST) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

~ # /tmp/smbshare/usr/sbin/tcpdump -?
tcpdump version 3.9.4
libpcap version 0.9.4
Usage: tcpdump   




~ #

You can dump the output of tcpdump to a file in load into wireshark no problem.. Would not be exactly real time -- unless your using tcpdump directly to view the packages -- which works great.. Or you could install dsniff as well.

here is a simple dump of the capture to a file, an then loaded into wireshark.

/tmp/usr/sbin # ./tcpdump -w /tmp/dump
tcpdump: listening on br0, link-type EN10MB (Ethernet), capture size 96 bytes
23 packets captured
46 packets received by filter
0 packets dropped by kernel

Then view this in wireshark