Capture Torrents with Wireshark

Posted on Saturday, July 3, 2010 2:32 pm by TCAT Shelbyville IT Department

Wireshark is an excellent network sniffer and protocol analyzer that is free.  Easy to install, Wireshark is a must have on networks.

You can use Wireshark to capture torrent traffic (basic method) by Clicking on Capture, Interfaces, select the options button next to the active adapter.   Now create your filter.



Now create a filter using ports 6881-6889 and name the filter torrent. While many torrents are setup on different or randomized ports, you can search a capture and look for P2P software.

After naming the filter, click OK and then Start.

So what about encryption?  Look at the amount of traffic from a computer on your network.

Scheduled Post (14:22 7/3/2010)

About TCAT Shelbyville IT Department

The Tennessee College of Applied Technology - is one of 46 institutions in the Tennessee Board of Regents System, the seventh largest system of higher education in the nation. This system comprises six universities, fourteen community colleges, and twenty-six Applied Technology Colleges.
This entry was posted in Computers and tagged , , , , , . Bookmark the permalink.

2 Responses to Capture Torrents with Wireshark

  1. Pingback: Detect Torrents On Your Network « TTC Shelbyville – Technical Blog

Leave a comment