Packet Sniffer Host; Packet Sniffer Connections - MikroTik RouterOS v2.9 Reference Manual

1 ip tcp
2 ip gre
3 ip tcp
4 ip tcp
[admin@MikroTik] tool sniffer protocol>

Packet Sniffer Host

Home menu level: /tool sniffer host
Description
The submenu shows the list of hosts that were participating in data excange you've sniffed.
Property Description
address ( read-only: IP address ) - IP address of the host
peek-rate ( read-only: integer/integer ) - the maximum data-rate received/transmitted
rate ( read-only: integer/ integer ) - current data-rate received/transmitted
total ( read-only: integer/ integer ) - total packets received/transmitted
Example
In the following example we'll see the list of hosts:
[admin@MikroTik] tool sniffer host> print
# ADDRESS
0 10.0.0.4
1 10.0.0.144
2 10.0.0.181
3 10.0.0.241
[admin@MikroTik] tool sniffer host>

Packet Sniffer Connections

Home menu level: /tool sniffer connection
Description
Here you can get a list of the connections that have been watched during the sniffing time.
Property Description
active ( read-only: yes | no ) - if yes the find active connections
bytes ( read-only: integer ) - bytes in the current connection
dst-address ( read-only: IP address ) - destination address
mss ( read-only: integer ) - Maximum Segment Size
resends ( read-only: integer ) - the number of packets resends in the current connection
src-address ( read-only: IP address ) - source address
Page 614 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
22 (ssh)
23 (telnet)
RATE PEEK-RATE
0bps/0bps 704bps/0bps
0bps/0bps 6.24kbps/12.2kbps
0bps/0bps 12.2kbps/6.24kbps
0bps/0bps 1.31kbps/4.85kbps
74 4328
3 264
49 3220
25 1108
TOTAL
264/0
1092/2128
2994/1598
242/866
94.25 %
5.74 %
70.12 %
24.12 %