How can a UDP Client and a packet sniffer run on the same machine?
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
asked Dec 13 at 21:46
Fred
1185
add a comment |
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
asked Dec 13 at 21:46
Fred
1185
add a comment |
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
asked Dec 13 at 21:46
Fred
1185
In my understanding, if you have a UDP socket client that is bound to a particular port, then a second UDP client on the same machine can't bind to the same port.
If this is the case, then how can a packet sniffing program like Wireshark run on the same machine you have a UDP client without issues?
wireshark udp packet-analysis layer4 transport-protocol
wireshark udp packet-analysis layer4 transport-protocol
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
asked Dec 13 at 21:46
Fred
1185
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
asked Dec 13 at 21:46
Fred
1185
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
edited Dec 14 at 6:18
Ron Maupin♦
61.7k1162114
61.7k1162114
asked Dec 13 at 21:46
Fred
1185
asked Dec 13 at 21:46
Fred
1185
asked Dec 13 at 21:46
Fred
1185
1185
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "496"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55451%2fhow-can-a-udp-client-and-a-packet-sniffer-run-on-the-same-machine%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
add a comment |
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
add a comment |
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
Packet sniffing applications tap into the lower layers of the network stack, not at the top like your UDP-using applications that connect to UDP at the top of the network stack.
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
edited Dec 14 at 6:21
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
answered Dec 13 at 21:51
Ron Maupin♦
61.7k1162114
61.7k1162114
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
add a comment |
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Are you saying that the packet sniffing applications work at the network/routing layer?
– Fred
Dec 13 at 22:04
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
Even lower than that. Most can capture the Data-Link frames.
– Ron Maupin♦
Dec 13 at 22:05
1
1
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
@Fred Usually the packet capturing happens right on top of the NIC, ie. between layer 2 and 3.
– Zac67
Dec 13 at 22:11
add a comment |
Thanks for contributing an answer to Network Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55451%2fhow-can-a-udp-client-and-a-packet-sniffer-run-on-the-same-machine%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
