Packet Sniffer Configuration - MikroTik RouterOS v2.9 Reference Manual

Packages required: system
License required: level1
Home menu level: /tool sniffer
Standards and Technologies: none
Hardware usage: Not significant
Related Documents
• Software Package Management
Description
It allows you to "sniff" packets going through the router (and any other traffic that gets to the router,
when there is no switching in the network) and view them using specific software.

Packet Sniffer Configuration

Home menu level: /tool sniffer
Property Description
interface ( name | all ; default: all ) - the name of the interface that receives the packets
only-headers ( yes | no ; default: no ) - whether to save in the memory packets' headers only (not
the whole packet)
memory-limit ( integer ; default: 10 ) - maximum amount of memory to use. Sniffer will stop after
this limit is reached
file-name ( text ; default: "" ) - the name of the file where the sniffed packets will be saved to
file-limit ( integer ; default: 10 ) - the limit of the file in KB. Sniffer will stop after this limit is
reached
streaming-enabled ( yes | no ; default: no ) - whether to send sniffed packets to a remote server
streaming-server ( IP address ; default: 0.0.0.0 ) - Tazmen Sniffer Protocol (TZSP) stream
receiver
filter-stream ( yes | no ; default: yes ) - whether to ignore sniffed packets that are destined to the
stream server
filter-protocol ( all-frames | ip-only | mac-only-no-ip ; default: ip-only ) - specific protocol group
to filter
• all-frames - sniff all packets
• ip-only - sniff IP packets only
• mac-only-no-ip - sniff non-IP packets only
filter-address1 ( IP address/mask:port ; default: 0.0.0.0/0:0-65535 ) - criterion of choosing the
packets to process
filter-address2 ( IP address/mask:port ; default: 0.0.0.0/0:0-65535 ) - criterion of choosing the
packets to process
running ( read-only: yes | no ; default: no ) - if the sniffer is started then the value is yes otherwise
no
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
Page 609 of 695