Packet Sniffer Protocols - MikroTik RouterOS v2.9 Reference Manual

• ah - IPsec AH protocol
• rspf - Radio Shortest Path First
• vmtp - Versatile Message Transport Protocol
• ospf - Open Shortest Path First
• ipip - IP encapsulation (protocol 4)
• encap - IP encapsulation (protocol 98)
protocol ( read-only: ip | arp | rarp | ipx | ipv6 ) - the name/number of ethernet protocol
• ip - Internet Protocol
• arp - Address Resolution Protocol
• rarp - Reverse Address Resolution Protocol
• ipx - Internet Packet exchange protocol
• ipv6 - Internet Protocol next generation
size ( read-only: integer ) - size of packet
src-address ( IP address ) - source address
time ( read-only: time ) - time when packet arrived
tos ( read-only: integer ) - IP Type Of Service
ttl ( read-only: integer ) - IP Time To Live
Example
In the example below it's seen, how to get the list of sniffed packets:
[admin@MikroTik] tool sniffer packet> pr
# TIME INTERFACE SRC-ADDRESS
0 0.12 ether1
1 0.12 ether1
2 0.12 ether1
3 0.292 ether1
4 0.32 ether1
5 0.744 ether1
6 0.744 ether1
7 0.744 ether1
8 0.744 ether1
-- more

Packet Sniffer Protocols

Home menu level: /tool sniffer protocol
Description
In this submenu you can see all kind of protocols that have been sniffed.
Property Description
bytes ( integer ) - total number of data bytes
protocol ( read-only: ip | arp | rarp | ipx | ipv6 ) - the name/number of ethernet protocol
• ip - Internet Protocol
Page 612 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
10.0.0.241:1839
10.0.0.241:1839
10.0.0.181:23 (telnet)
10.0.0.181
10.0.0.241:1839
10.0.0.144:2265
10.0.0.144:2265
10.0.0.181:22 (ssh)
10.0.0.181:22 (ssh)
DST-ADDRESS
10.0.0.181:23 (telnet) tcp
10.0.0.181:23 (telnet) tcp
10.0.0.241:1839
10.0.0.4
10.0.0.181:23 (telnet) tcp
10.0.0.181:22 (ssh)
10.0.0.181:22 (ssh)
10.0.0.144:2265
10.0.0.144:2265
IP-.. SIZE
46
40
tcp 78
gre 88
40
tcp 76
tcp 76
tcp 40
tcp 76