Hacker News Reader

Not the original commenter but I've heard of people debugging smart TV's using https://www.wireshark.org to see the network requests, you would connect the device you want to inspect to a network being shared through your computer running Wireshark, and then you can analyze every request going in and out (or at least see them and be aware of the traffic)

View on HN

I got enough data on what was going on by just using dns logs and my router's built in logging.

Alternatively, put your NIC into promiscuous mode and capture the traffic that way.

That only works if you use a hub instead of a switch, or if the traffic is broadcast, or if you somehow convince the switch to give your port all traffic. It's easiest to just use two NICs bridged in one PC as a MITM.

You can also easily run an ARP spoofing attack, and not just to sniff but also to manipulate. Done that quite often back in my school time, oh the glorious days when web traffic was mostly plain HTTP.

There were entire command lists going around specifying what exactly one needed to replace, say, the logo of an online newspaper with a picture of a dong.

Even an el cheap basic managed switch will do port mirroring

Reply on news.ycombinator.com