A Survey on Packet Capture: Tool Introduction and Security Vulnerability Description

Abstract

This work involves discovering network security vulnerabilities based on existing packet capture software. By learning the operation principle of packet capture software, we discuss the hidden network security problem among them. There are two basic packet capture software mentioned Wireshark and Sniffer. Analyse the SSL (Secure Socket Layer) protocol and HTTPS (Hypertext Transfer Protocol Secure) protocol to observe where causes a vulnerability in those protocols that allows the thief to obtain information through packet capture software. Finding an attack mode of the thief, we further study and discuss how to reduce the risk of information leakage caused by vulnerability existing. We hope the perspective proposed is not only to avoid workstation chaos caused by packet capture software as far as possible, but also to further encrypt the plaintext data to make it more difficult for packet capture tools to parse the packet.